按 Azure Active Directory 中的组成员资格将许可证分配给用户Assign licenses to users by group membership in Azure Active Directory

本文将指导你完成将产品许可证分配给一组用户,并验证他们是否在 Azure Active Directory (Azure AD) 中获得正确许可的过程。This article walks you through assigning product licenses to a group of users and verifying that they're licensed correctly in Azure Active Directory (Azure AD).

在此示例中,Azure AD 组织包含名为“HR Department”的安全组。In this example, the Azure AD organization contains a security group called HR Department. 此组包括人力资源部的所有成员(大约 1,000 个用户)。This group includes all members of the human resources department (around 1,000 users). 你要将 Office 365 企业版 E3 许可证分配给整个部门。You want to assign Office 365 Enterprise E3 licenses to the entire department. 必须暂时禁用产品中包含的 Yammer Enterprise 服务,直到该部门准备好开始使用它为止。The Yammer Enterprise service that's included in the product must be temporarily disabled until the department is ready to start using it. 你还希望将企业移动性 + 安全性许可证部署到同一个用户组。You also want to deploy Enterprise Mobility + Security licenses to the same group of users.

备注

某些 Microsoft 服务不能在所有位置使用。Some Microsoft services are not available in all locations. 在将许可证分配给用户之前,管理员必须为该用户指定“使用位置”属性。Before a license can be assigned to a user, the administrator has to specify the Usage location property on the user.

对于组许可证分配,任何没有指定使用位置的用户将继承该目录的位置。For group license assignment, any users without a usage location specified inherit the location of the directory. 如果你的用户位于多个位置,则建议你始终在 Azure AD 中的用户创建流程中设置使用位置(例如通过 AAD Connect 配置)- 这可确保许可证分配的结果始终正确并且用户不会在不允许的位置收到服务。If you have users in multiple locations, we recommend that you always set usage location as part of your user creation flow in Azure AD (e.g. via AAD Connect configuration) - that ensures the result of license assignment is always correct and users do not receive services in locations that are not allowed.

步骤 1:分配所需的许可证Step 1: Assign the required licenses

  1. 使用许可证管理员帐户登录 Azure 门户Sign in to the Azure Portal with a license administrator account. 若要管理许可证,该帐户必须是许可证管理员、用户管理员或全局管理员。To manage licenses, the account must be a license administrator, user administrator, or global administrator.

  2. 选择“许可证”以打开一个页面,可以在其中查看和管理租户中的所有可许可产品。Select Licenses to open a page where you can see and manage all licensable products in the organization.

  3. 在“所有产品”下,通过选择产品名称选中 Office 365 企业版 E5 和企业移动性 + 安全性 E3。Under All products , select both Office 365 Enterprise E5 and Enterprise Mobility + Security E3 by selecting the product names. 若要开始分配,请选择页面顶部的“分配”。To start the assignment, select Assign at the top of the page.

    选择要分配许可证的产品

  4. 在“分配许可证”页上,选择“用户和组”以打开用户和组的列表。 On the Assign license page, select Users and groups to open a list of users and groups.

  5. 选择一个用户或组,然后使用页面底部的“选择”按钮确认所做的选择。Select a user or group, and then use the Select button at the bottom of the page to confirm your selection.

  6. 在“分配许可证”页上,单击“分配选项”,这将显示我们先前选择的两个产品中包括的所有服务计划。 On the Assign license page, click Assignment options , which displays all service plans included in the two products that we selected previously. 查找“Yammer Enterprise”并将设置为“关闭”,以便在产品许可证中禁用该服务。Find Yammer Enterprise and turn it Off to disable that service from the product license. 在“许可证选项”的底部单击“确定”确认操作。 Confirm by clicking OK at the bottom of License options.

    选择许可证的服务计划

  7. 若要完成分配,请在“分配许可证”页上,单击页面底部的“分配”。To complete the assignment, on the Assign license page, click Assign at the bottom of the page.

  8. 右上角会显示一条通知,显示分配过程的状态和结果。A notification is displayed in the upper-right corner that shows the status and outcome of the process. 如果无法完成向组分配许可证(例如,由于该组中已有许可证),请单击该通知查看失败详细信息。If the assignment to the group couldn't be completed (for example, because of pre-existing licenses in the group), click the notification to view details of the failure.

向组分配许可证时,Azure AD 将处理该组的所有现有成员。When assign licenses to a group, Azure AD processes all existing members of that group. 此过程可能需要一些时间,因组的大小而异。This process might take some time, varying with the size of the group. 下一步骤介绍了如何验证该过程是否完成,并确定是否需要采取进一步的措施来解决问题。The next step describes how to verify that the process has finished and determine if further attention is required to resolve problems.

步骤 2:验证初始分配是否已完成Step 2: Verify that the initial assignment has finished

  1. 转到“Azure Active Directory” > “组”。Go to Azure Active Directory > Groups. 选择已向其分配许可证的组。Select the group that licenses were assigned to.

  2. 在该组页上,选择“许可证”。On the group page, select Licenses. 这使你可以快速确认是否已完全将许可证分配给用户,以及是否有任何需要调查的错误。This lets you quickly confirm if licenses have been fully assigned to users and if there are any errors that you need to look into. 该边栏选项卡中提供以下信息:The following information is available:

    • 当前分配到该组的服务许可证。Service licenses that are currently assigned to the group. 选择一个条目可以显示已启用的特定服务以及进行更改。Select an entry to show the specific services that have been enabled and to make changes.

    • 最新许可证更改的状态更新,如果正在处理更改或所有用户成员的处理已经完成,则会显示这些状态更新。Status updates of the latest license changes, which are available if the changes are being processed or if processing has finished for all user members.

    • 有关处于错误状态的用户许可证分配的信息。Information about user license assignments that are in an error state.

    许可错误和许可证状态

  3. 可在“Azure Active Directory” > “用户和组” > “组名称” > “审核日志”下查看有关许可证处理的更多详细信息。See more detailed information about license processing under Azure Active Directory > Users and groups > group name > Audit logs. 检查以下活动:Check the following activities:

    • 活动:Start applying group based license to usersActivity: Start applying group based license to users. 当系统选取针对组所做的许可证分配更改并开始向所有用户成员应用该更改时,记录此活动。This is logged when the system picks up the license assignment change on the group and starts applying it to all user members. 其中包含有关所做的更改的信息。It contains information about the change that was made.

    • 活动:Finish applying group based license to usersActivity: Finish applying group based license to users. 当系统完成对组中所有用户的处理时,记录此活动。This is logged when the system finishes processing all users in the group. 它包含有关已成功处理多少个用户,以及无法为多少个用户分配组许可证的摘要。It contains a summary of how many users were successfully processed and how many users couldn't be assigned group licenses.

步骤 3:检查和解决许可证问题Step 3: Check for license problems and resolve them

  1. 转到“Azure Active Directory” > “组”,并找到已将许可证分配到的组。Go to Azure Active Directory > Groups , and find the group that licenses were assigned to.

  2. 在该组页上,选择“许可证”。On the group page, select Licenses. 页面顶部的通知显示无法为 10 个用户分配许可证。The notification on top of the page shows that there are 10 users that licenses couldn't be assigned to. 打开此通知可以看到该组中处于许可错误状态的所有用户的列表。Open it to see a list of all users in a licensing error state for this group.

  3. “失败的分配”列告知无法向这些用户分配这两个产品许可证。The Failed assignments column tells us that both product licenses couldn't be assigned to the users. “故障的首要原因”列包含失败的原因。The Top reason for failure column contains the cause of the failure. 在此示例中,原因是 冲突的服务计划In this case, it's Conflicting service plans.

    无法分配的许可证

  4. 选择用户以打开该用户的“许可证”页。Select a user to open the user's Licenses page. 此页显示当前已分配给该用户的所有许可证。This page shows all licenses that are currently assigned to the user. 在此示例中,该用户具有从“网亭用户”组继承的 Office 365 企业版 E1 许可证。In this example, the user has the Office 365 Enterprise E1 license that was inherited from the Kiosk users group. 这与系统尝试从 HR Department 组应用的 E3 许可证冲突。This conflicts with the E3 license that the system tried to apply from the HR Department group. 因此,该组中的许可证均未分配给该用户。As a result, none of the licenses from that group has been assigned to the user.

    查看用户的所有许可证冲突

  5. 若要解决此问题,请从“网亭用户”组中删除了该用户。To solve this conflict, remove the user from the Kiosk users group. Azure AD 处理更改后,将正常分配“人力资源部”许可证。After Azure AD processes the change, the HR Department licenses are correctly assigned.

后续步骤Next steps

若要详细了解使用组分配许可证的功能集,请参阅以下文章:To learn more about the feature set for license assignment using groups, see the following articles: