如何将具有单个许可证的用户迁移到组以获取许可How to migrate users with individual licenses to groups for licensing

可能已通过直接分配将现有许可证部署到了组织中的用户;也就是说,使用 PowerShell 脚本或其他工具为单个用户分配了许可证。You may have existing licenses deployed to users in the organizations via direct assignment; that is, using PowerShell scripts or other tools to assign individual user licenses. 在开始使用基于组的许可来管理组织中的许可证之前,可以使用此迁移计划将现有解决方案无缝地替换为基于组的许可。Before you begin using group-based licensing to manage licenses in your organization, you can use this migration plan to seamlessly replace existing solutions with group-based licensing.

要记住的最重要的一件事是,应该避免出现迁移到基于组的许可后,导致用户暂时失去其当前分配的许可证的情况。The most important thing to keep in mind is that you should avoid a situation where migrating to group-based licensing will result in users temporarily losing their currently assigned licenses. 应该避免可能导致删除许可证的任何过程,以消除用户失去服务及其数据访问权限的风险。Any process that may result in removal of licenses should be avoided to remove the risk of users losing access to services and their data.

  1. 如果正在使用现有的自动化工具(例如 PowerShell)管理和删除用户的许可证分配,You have existing automation (for example, PowerShell) managing license assignment and removal for users. 请让它继续按现状运行。Leave it running as is.

  2. 创建新的许可组(或确定要使用哪些现有组),并确保将全部所需的用户添加为成员。Create a new licensing group (or decide which existing groups to use) and make sure that all required users are added as members.

  3. 将所需的许可证分配到这些组;目标应该是反映现有自动化工具(例如 PowerShell)向这些用户应用的相同许可状态。Assign the required licenses to those groups; your goal should be to reflect the same licensing state your existing automation (for example, PowerShell) is applying to those users.

  4. 验证是否已向这些组中的所有用户应用许可证。Verify that licenses have been applied to all users in those groups. 要完成应用程序操作,可以检查每个组的处理状态并查看审核日志。This application can be done by checking the processing state on each group and by checking Audit Logs.

    • 查看单个用户的许可证详细信息,即可查明该用户的许可状态。You can spot check individual users by looking at their license details. 可以看到,他们具有“直接”分配的以及从组“继承”的相同许可证。You will see that they have the same licenses assigned “directly” and “inherited” from groups.

    • 如果将一个产品许可证直接分配给用户,同时又通过组将同一个许可证分配给用户,该用户只会使用一个许可证。When the same product license is assigned to the user both directly and through a group, only one license is consumed by the user. 因此,不需要使用其他许可证来执行迁移。Hence no additional licenses are required to perform migration.

  5. 在每个组中检查处于错误状态的用户,验证是否没有许可证分配失败。Verify that no license assignments failed by checking each group for users in error state. 有关详细信息,请参阅识别和解决组的许可证问题For more information, see Identifying and resolving license problems for a group.

请考虑删除原始的直接分配。Consider removing the original direct assignments. 我们建议你逐步执行此操作,并首先监视一部分用户的结果。We recommend that you do it gradually, and monitor the outcome on a subset of users first. 如果可以保留用户的原始直接分配,但当用户离开其许可组时,他们会保留直接分配的许可证,这可能不是你想要的结果。If you could leave the original direct assignments on users, but when the users leave their licensed groups they retain the directly assigned licenses, which might not be what you want.

示例An example

一个组织拥有 1,000 位用户。An organization has 1,000 users. 所有用户都需要 Office 365 企业版 E3 许可证。All users require Office 365 Enterprise E3 licenses. 目前,该组织在本地运行一个 PowerShell 脚本,用于添加和删除新进用户与离职用户的许可证。Currently the organization has a PowerShell script running on premises, adding and removing licenses from users as they come and go. 但是,该组织希望将该脚本替换为基于组的许可,可让 Azure AD 自动管理许可证。However, the organization wants to replace the script with group-based licensing so licenses can be managed automatically by Azure AD.

可能的迁移过程如下:Here is what the migration process could look like:

  1. 使用 Azure 门户将 Office 365 E3 许可证分配到 Azure AD 中的“所有用户”组 。Using the Azure portal, assign the Office 365 E3 license to the All users group in Azure AD.

  2. 确认为所有用户完成了许可证分配。Confirm that license assignment has completed for all users. 转到该组的概述页,选择“许可证”,并检查“许可证”边栏选项卡顶部的处理状态。 Go to the overview page for the group, select Licenses , and check the processing status at the top of the Licenses blade.

    • 查看“已向所有用户应用最新的许可证更改”,确认处理已完成。Look for “Latest license changes have been applied to all users" to confirm processing has completed.

    • 查看顶部的通知,了解可能未成功为其分配许可证的用户。Look for a notification on top about any users for whom licenses may have not been successfully assigned. 某些用户的许可证是否已用完?Did we run out of licenses for some users? 某些用户的许可证计划是否有冲突,从而导致他们无法继承组许可证?Do some users have conflicting license plans that prevent them from inheriting group licenses?

  3. 定点检查某些用户,确认是否为他们应用了直接许可证和组许可证。Spot check some users to verify that they have both the direct and group licenses applied. 转到用户的“配置文件”页,选择“许可证”,并检查许可证的状态。 Go to the profile page for a user, select Licenses , and examine the state of licenses.

    • 下面是迁移期间预期的用户状态:This is the expected user state during migration:

      迁移期间预期的用户状态

      这种状态可以确认用户既有直接许可证,也有继承的许可证。This confirms that the user has both direct and inherited licenses. 我们会看到已分配 Office 365 E3。We see that Office 365 E3 is assigned.

    • 选择每个许可证可查看启用了哪些服务。Select each license to see which services are enabled. 若要验证直接许可证和组许可证是否为用户启用完全相同的服务,请选择“分配” 。To verify that the direct and group licenses enable exactly the same services for the user, select Assignments.

  4. 确认直接许可证和组许可证相同后,可以开始删除用户的直接许可证。After confirming that both direct and group licenses are equivalent, you can start removing direct licenses from users. 一开始可以试着在门户中删除单个用户的许可证,并运行自动化脚本批量删除许可证。You can test this by removing them for individual users in the portal and then run automation scripts to have them removed in bulk. 下面是通过门户删除同一用户的直接许可证的示例。Here is an example of the same user with the direct licenses removed through the portal. 请注意,许可证状态将保持不变,但我们不再会看到直接分配。Notice that the license state remains unchanged, but we no longer see direct assignments.

    确认已删除直接许可证

后续步骤Next steps

详细了解组许可证管理的其他方案:Learn more about other scenarios for group license management: