Assign Office 365 Licenses with Active Directory Groups

Published on
5,093 Points
Last Modified:
Shaun Hardneck
Passionate and Experienced IT Professional with experience in Microsoft Exchange Messaging and Office 365 solutions.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.

Assign Office 365 Licenses with Active Directory Groups


In this post I will walk through the options of assigning Office 365 Licenses based on Active Directory Group membership. Microsoft recently released the new feature in Azure Active Directory which allows you to apply Azure licenses, as well as Office 365 licenses based on group membership.


To get started and make use of this feature in Azure Active Directory an Azure Active Directory Premium Plan subscription needs to be enabled.


For the purpose of this demonstration I have created a 30 Day trail of Azure AD Premium. I have also already configured Microsoft Azure Active Directory Connect to sync my groups and users to Azure AD. Tool can be downloaded here.


To get started I have created the following group in my On-premises Active Directory and this group has been synced to AZ AD.

Now connect to your Azure AD Portal link, then navigate to Azure Active Directory.

On the right hand side under "Quick tasks" click on "Find a group" and then click on the newly created and synced group.

On the overview page of the selected group we can see that there is two users part of the newly created group.

Next lets go ahead and click on Licenses on the left hand side menu.

And then click on "Assign" on the top of the next menu.

In the "License Assigning" menu , click "Configure required settings".

Then select the available licenses. For this post I have Office 365 Enterprise E3 licenses and I will be selecting those and then clicking select at the bottom on the Menu.

On the Assignment menu, select which options you do not want to assign to users of this group and then click OK.

Once back on the "Assign License" menu, click on "Assign" at the bottom of the menu.

Next we can see that the licenses are now available and assigned to the group.

Now that the licenses have been assigned to the Active Directory group, lets connect to Office 365 and verify that the licenses have been assigned to the two mentioned users in the group.

Connect to the Office 365 Admin Portal.

Once connected to the Admin portal, go to "Users" then "Active users" and then from the Menu on top, select "Views > Licensed users"


As you can see, the two users have been synced and the Office 365 License has been assigned to the Users.

With this option available, it makes it easy to configure and provision Office 365 mailboxes, as well as configuring different groups, which will allow users to have access to different types of online services.

Hope that these steps will be as beneficial for some as they were for me. Configuring Azure and Office 365 Licenses based on groups freed up my time to do something else.



Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Join & Write a Comment

Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Learn the basics of Skype For Business in office 365

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month