Azure AD licenses can be assigned to user accounts. When you want to assign licenses to a group, the intention is to assign those licenses to the members of the group.
You can assign licenses to Microsoft 365 groups and security groups, but not to mail-enabled security groups. Furthermore, the group should be security-enabled to get the licenses assigned.
From the given list:
Group1: Security group (Security Enabled) - You can assign licenses.
Group2: Mail-enabled security group (Security Enabled) - You cannot assign licenses to mail-enabled security groups.
Group3: Microsoft 365 group (Security Enabled) - You can assign licenses.
Group4: Microsoft 365 group (Security Disabled) - You cannot assign licenses to security-disabled groups.
The correct answer is:
B. Group1 and Group3 only.
I just tried it in my tenant and I was able to assign a license to a mail enabled security group without issue. I think it's only distribution lists and non-security enabled groups that you can't.
"If you have security groups, mail enabled groups, or Microsoft 365 groups, you can assign or unassign licenses for those groups on the Licenses page in the Microsoft 365 admin center. We refer to this as group-based licensing."
not sure if it was not able in the past, but i found this here.
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
Answer is B:
"The feature can only be used with security groups, and Microsoft 365 groups that have securityEnabled=TRUE."
https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-group-advanced#limitations-and-known-issues
I could not find much information on the possibility of adding it to 'mail enabled' group.
in your comment link, it mentioned: "Mail-enabled security groups are used for granting access to resources such as SharePoint, and emailing notifications to those users."
mail-enabled security group is a security group too.
I have just created a mail-enabled security group and assigned several licenses... just test it, you will see
you can assign Azure Active Directory Premium P2 licenses to Group-2, which is a mail-enabled security group. Azure AD supports assigning licenses to both security groups and mail-enabled security groups1.
Here is the updated list of groups to which you can assign licenses:
Group-1: Security type group, Security Enabled
Group-2: Mail-Enabled Security type group, Security Enabled
Group-3: Microsoft 365 type group, Security Enabled
You cannot assign licenses to Group-4 because it is a Microsoft 365 type group with security disabled
Tested in Lab 21 Feb 2025,
mail-enabled security group is also under security group tab which can be assigned group based licensing.
I think what matters is just security enabled or disabled.
License Assignment Requirements for Groups:
✅ Security Groups (Security enabled) – Supported
✅ Microsoft 365 Groups (Security enabled) – Supported
❌ Microsoft 365 Groups (Security disabled) – Not Supported
❌ Mail-Enabled Security Groups – Not Supported
❌ Distribution Lists – Not Supported
https://learn.microsoft.com/en-us/entra/fundamentals/concept-group-based-licensing , Licenses can be assigned to any security group in Microsoft Entra ID. Security groups can be synced from on-premises, by using Microsoft Entra Connect. You can also create security groups directly in Microsoft Entra ID (also called cloud-only groups), or automatically via the Microsoft Entra dynamic group feature. So i think "Mail-enabled security group" is one of the security group
Sorry I selected the answer wrongly Refer to the below Microsoft documentation, We can assign the license to a mail-enabled security group So the answer is : D
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
If you have security groups, mail enabled groups, or Microsoft 365 groups, you can assign or unassign licenses for those groups on the Licenses page in the Microsoft 365 admin center. We refer to this as group-based licensing.
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
Given this information, Group2 (Mail-Enabled Security) is eligible for license assignment. Therefore, the correct groups for license assignment are Group1, Group2, and Group3. This aligns with option D: "Group1, Group2, and Group3 only."
Key Takeaway:
When assigning licenses in Azure AD, ensure that the groups are security-enabled. This includes standard security groups, mail-enabled security groups, and Microsoft 365 groups with security enabled.
sorry guys according to Microsoft documentation :
If you have security groups, mail enabled groups, or Microsoft 365 groups, you can assign or unassign licenses for those groups on the Licenses page in the Microsoft 365 admin center. We refer to this as group-based licensing.
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
iamchoy
Highly Voted 1 year, 6 months agoFryether1
7 months, 3 weeks agocpaljchc4
1 month, 1 week ago2d153f5
4 months, 2 weeks agoLovelyGroovey
1 year, 1 month agoSivaPannier
Highly Voted 1 year, 7 months ago[Removed]
1 year, 5 months ago[Removed]
1 year, 5 months agoedurakhan
10 months agoJedi_sg2000
10 months, 3 weeks agokriChe27
Most Recent 6 days, 9 hours agovrm1358
2 weeks ago1d6a499
1 month, 1 week agocpaljchc4
1 month, 1 week agoNathan12345
1 month, 2 weeks ago0703448
1 month, 3 weeks agoJay_D_Lincoln
1 month, 3 weeks agommp6428
2 months, 1 week ago7Zayin
2 months, 3 weeks agoKong2408
2 months, 3 weeks agoRajeshwaranM
3 months agoRajeshwaranM
3 months agoPisagid
3 months, 1 week agominura
3 months, 1 week agoArmandez
3 months, 4 weeks agoJPA210
4 months, 4 weeks agomercerc1
3 months, 3 weeks ago