Azure AD licenses can be assigned to user accounts. When you want to assign licenses to a group, the intention is to assign those licenses to the members of the group.
You can assign licenses to Microsoft 365 groups and security groups, but not to mail-enabled security groups. Furthermore, the group should be security-enabled to get the licenses assigned.
From the given list:
Group1: Security group (Security Enabled) - You can assign licenses.
Group2: Mail-enabled security group (Security Enabled) - You cannot assign licenses to mail-enabled security groups.
Group3: Microsoft 365 group (Security Enabled) - You can assign licenses.
Group4: Microsoft 365 group (Security Disabled) - You cannot assign licenses to security-disabled groups.
The correct answer is:
B. Group1 and Group3 only.
I just tried it in my tenant and I was able to assign a license to a mail enabled security group without issue. I think it's only distribution lists and non-security enabled groups that you can't.
Answer is B:
"The feature can only be used with security groups, and Microsoft 365 groups that have securityEnabled=TRUE."
https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-group-advanced#limitations-and-known-issues
I could not find much information on the possibility of adding it to 'mail enabled' group.
in your comment link, it mentioned: "Mail-enabled security groups are used for granting access to resources such as SharePoint, and emailing notifications to those users."
mail-enabled security group is a security group too.
I have just created a mail-enabled security group and assigned several licenses... just test it, you will see
License Assignment Requirements for Groups:
✅ Security Groups (Security enabled) – Supported
✅ Microsoft 365 Groups (Security enabled) – Supported
❌ Microsoft 365 Groups (Security disabled) – Not Supported
❌ Mail-Enabled Security Groups – Not Supported
❌ Distribution Lists – Not Supported
https://learn.microsoft.com/en-us/entra/fundamentals/concept-group-based-licensing , Licenses can be assigned to any security group in Microsoft Entra ID. Security groups can be synced from on-premises, by using Microsoft Entra Connect. You can also create security groups directly in Microsoft Entra ID (also called cloud-only groups), or automatically via the Microsoft Entra dynamic group feature. So i think "Mail-enabled security group" is one of the security group
Sorry I selected the answer wrongly Refer to the below Microsoft documentation, We can assign the license to a mail-enabled security group So the answer is : D
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
If you have security groups, mail enabled groups, or Microsoft 365 groups, you can assign or unassign licenses for those groups on the Licenses page in the Microsoft 365 admin center. We refer to this as group-based licensing.
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
Given this information, Group2 (Mail-Enabled Security) is eligible for license assignment. Therefore, the correct groups for license assignment are Group1, Group2, and Group3. This aligns with option D: "Group1, Group2, and Group3 only."
Key Takeaway:
When assigning licenses in Azure AD, ensure that the groups are security-enabled. This includes standard security groups, mail-enabled security groups, and Microsoft 365 groups with security enabled.
sorry guys according to Microsoft documentation :
If you have security groups, mail enabled groups, or Microsoft 365 groups, you can assign or unassign licenses for those groups on the Licenses page in the Microsoft 365 admin center. We refer to this as group-based licensing.
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses?view=o365-worldwide
You can absolutely assign these licensed to mail enabled security groups. They shifted this to admin portal and I am able to assign my e5 licenses to a mail enabled security group
License can be applied for only security groups or security-enabled Microsoft 365 (Unified) groups.
https://techcommunity.microsoft.com/t5/microsoft-365/why-can-t-i-assign-licenses-to-every-groups-created-using-ms/m-p/2776552
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
iamchoy
Highly Voted 1 year, 5 months agoFryether1
6 months, 2 weeks ago2d153f5
3 months, 1 week agoLovelyGroovey
11 months, 3 weeks agoSivaPannier
Highly Voted 1 year, 5 months ago[Removed]
1 year, 3 months ago[Removed]
1 year, 3 months agoedurakhan
8 months, 3 weeks agoJedi_sg2000
9 months, 2 weeks agoNathan12345
Most Recent 1 week, 2 days ago0703448
2 weeks, 2 days agoJay_D_Lincoln
2 weeks, 5 days agommp6428
1 month ago7Zayin
1 month, 2 weeks agoKong2408
1 month, 2 weeks agoRajeshwaranM
1 month, 3 weeks agoRajeshwaranM
1 month, 3 weeks agoPisagid
2 months agominura
2 months agoArmandez
2 months, 3 weeks agoJPA210
3 months, 3 weeks agomercerc1
2 months, 2 weeks agojamesf
4 months agoShame1994
4 months, 1 week agojamesf
4 months, 1 week agoOmer87
5 months, 1 week ago