6.1 Managing & Monitoring Microsoft 365 Licenses

Microsoft 365 Administrator Expert MS-102

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

1.1 MS-102 Exam Facts & Blueprint 1.2 Registration, Retake & Renewal 1.3 Study Strategy & Using This Guide

2 Tenant Setup, Domains & Org Settings

2.1 Creating a Microsoft 365 Tenant 2.2 Implementing and Managing Domains 2.3 Configuring Org Settings: Security, Privacy & Profile

3 Service Health, Network & Software Updates

3.1 Monitoring Service Health & Notifications 3.2 Network Connectivity Insights 3.3 Configuring & Monitoring Software Updates

4 Adoption, Usage & Microsoft 365 Backup

4.1 Monitoring Adoption & Usage 4.2 Configuring & Managing Microsoft 365 Backup

5 Users, Contacts, Groups & Shared Mailboxes

5.1 Creating & Managing Users Including External Users 5.2 Creating & Managing Contacts 5.3 Managing Microsoft 365 Groups & Shared Mailboxes

6 Licensing & Bulk User Management

6.1 Managing & Monitoring Microsoft 365 Licenses 6.2 Bulk User Management with Graph & Entra PowerShell

7 Roles, Admin Units & Privileged Identity Management

7.1 Implementing & Managing Roles in M365 & Entra ID 7.2 Managing Permissions for Defender XDR, Purview & Workloads 7.3 Managing Delegation with Administrative Units 7.4 Managing Entra ID Roles in PIM

8 Identity Synchronization with Entra Connect

8.1 Preparing for Identity Synchronization & IdFix 8.2 Directory Sync with Entra Connect Sync & Cloud Sync 8.3 Monitoring Sync with Entra Connect Health 8.4 Troubleshooting Synchronization

9 Authentication, SSPR & Password Protection

9.1 Implementing & Managing Authentication Methods 9.2 Self-Service Password Reset (SSPR) 9.3 Microsoft Entra Password Protection 9.4 Investigating & Resolving Authentication Issues

10 Identity Protection, Conditional Access & MFA

10.1 Planning for Identity Protection 10.2 Implementing Entra Identity Protection 10.3 Planning & Implementing Conditional Access Policies 10.4 Managing MFA with Conditional Access

11 Defender XDR Posture, Incidents & Threat Intelligence

11.1 Security Exposure Management & Secure Score 11.2 Incidents, Alerts & Advanced Hunting 11.3 Reviewing Defender XDR Reports 11.4 Defender Threat Intelligence

12 Defender for Office 365: Policies, Alerts & Investigation

12.1 Threat Policies & Rules in Defender for Office 365 12.2 Configuring Alert Policies 12.3 Investigating & Responding to Email Threats

13 Attack Simulation & Restricted Entities

13.1 Managing Attack Simulations & Training 13.2 Managing Restricted Entities & Blocked Users

14 Defender for Endpoint

14.1 Onboarding Devices to Defender for Endpoint 14.2 Configuring Endpoint Settings 14.3 Defender Vulnerability Management Dashboard

15 Defender for Cloud Apps

15.1 Configuring the App Connector for Microsoft 365 15.2 Defender for Cloud Apps Policies & Alerts 15.3 Interpreting the Activity Log 15.4 Cloud App Discovery

16 Purview Information Protection & Data Lifecycle

16.1 Sensitive Information Types 16.2 Retention Labels & Policies 16.3 Sensitivity Labels & Policies 16.4 Monitoring Label Usage: Content & Activity Explorer

17 Purview Data Loss Prevention

17.1 DLP Policies for Microsoft 365 Workloads 17.2 Configuring Endpoint DLP 17.3 Reviewing & Responding to DLP Alerts, Events & Reports

18 Final Review & Exam Strategy

18.1 Exam-Day Strategy & Question Handling 18.2 Final Review Checklist & Next Steps

6.1 Managing & Monitoring Microsoft 365 Licenses

Key Takeaways Explain This Topic AI

A Microsoft 365 license SKU is a bundle of individual service plans; administrators can disable specific service plans per user while keeping the SKU assigned

Group-based licensing assigns a SKU to a security group or Microsoft 365 Group and every member inherits the license automatically as they join or leave

A user's license assignment state is one of Assigned, Pending, or Error; the Error state surfaces conflicts such as duplicate service plans or insufficient available licenses

A user must have a usage location set before a license can be assigned; without it the assignment fails with a usage-location validation error

The Microsoft 365 admin center Billing → Licenses view shows purchased SKUs, assigned and available counts, and expiring subscriptions for monitoring

Last updated: August 2026

Managing & Monitoring Microsoft 365 Licenses

Quick Answer: A Microsoft 365 license SKU is a bundle of individual service plans . You assign SKUs to users (directly) or to groups (so every member inherits them). License assignment states are Assigned , Pending , or Error ; errors are caused by conflicts or insufficient licenses. A user must have a usage location before any license can be assigned.

Microsoft 365 licensing is the gatekeeper for every workload an administrator provisions. Get it wrong and users lose mailboxes, Teams, or compliance features the day they are needed. The MS-102 exam tests the mechanics of license acquisition, assignment, group-based inheritance, and error remediation.

License Acquisition & the Billing Surface

Licenses are acquired by purchasing subscriptions (product SKUs) through the Microsoft 365 admin center under Billing → Your products and Billing → License (also labeled Billing → Licenses in newer admin center builds). Each subscription carries a quantity of license units. When you buy more licenses, the available count on the SKU increases; when you reduce seats, the available count decreases at the next billing cycle.

A subscription is the billing object; a license is the assignable unit that belongs to that subscription. One subscription of Microsoft 365 E3 with 100 seats gives you 100 individually assignable E3 licenses. The admin center also surfaces trial subscriptions here, which can be converted to paid subscriptions before they expire.

SKUs, Service Plans & Per-User Disablement

A license SKU (for example Microsoft 365 E3 or Microsoft 365 Business Premium ) is a bundle of service plans . Each service plan maps to a workload — Exchange Online, SharePoint Online, Microsoft Teams, Microsoft Copilot, Defender for Office 365, and so on. The SKU's product name is what you buy; the service plans are what the user actually gets enabled for.

Administrators can disable individual service plans per user while keeping the SKU assigned. This is common when an organization licenses everyone for E3 but wants to withhold Microsoft Bookings or Yammer from a subset of users. In the admin center this is done under the user's Licenses and apps pane by toggling individual apps off. With Microsoft Graph PowerShell the same outcome is achieved by posting an assignedLicenses payload that lists the SKU to keep and the disabledPlans array of service plan IDs to turn off.

Assigning Licenses to Users

Before a license can be assigned, the user object must have a usage location set (a two-letter country code such as US or GB ). Without a usage location the assignment fails with a usage-location validation error — this is one of the most common new-admin mistakes and a frequent exam point. Set usage location in the user properties pane or via PowerShell before assigning.

Direct assignment happens on the user's Licenses and apps pane: pick one or more SKUs, optionally disable service plans, and save. Bulk direct assignment is available from the Active users list by selecting multiple users and choosing Assign licenses in the bulk actions bar.

Group-Based Licensing

Group-based licensing is the recommended pattern for any tenant larger than a handful of users. You assign one or more SKUs to a security group or a Microsoft 365 Group , and every member inherits the license automatically. When a user joins the group, Entra ID provisions the license; when they leave, the license is reclaimed. This eliminates per-user assignment work and keeps group membership as the single source of truth for entitlement.

A user can receive licenses from multiple groups , and Entra ID processes all group-based assignments together. When service plans from different SKUs conflict (two SKUs enabling the same workload in incompatible ways), or when a user's direct assignment plus group assignment produce duplicate service plans, Entra ID records a license error rather than silently picking a winner. Microsoft has raised the legacy limits on group-based assignments several times; the safe exam answer is that multiple group-based assignments are supported and that conflicts surface as errors to be remediated , not that there is a fixed small cap.

License Assignment States & Resolving Errors

Each user's license record shows an assignment state:

• State Meaning
• Assigned The license is fully provisioned and the service plans are active
• Pending Entra ID is processing the assignment (common right after a group join or bulk operation)
• Error Provisioning failed — a conflict, insufficient licenses, or missing usage location

Common error causes and their fixes:

Duplicate service plans across SKUs — two assigned SKUs both enable the same plan in a conflicting way. Remove one SKU or disable the conflicting plan on one of them.

Insufficient licenses — the SKU has zero available seats. Purchase more seats or reclaim licenses from inactive users.

Missing usage location — set the user's usage location, then retry the assignment.

Conflicting service plans — for example, two plans that cannot coexist on the same user. Disable one of the conflicting plans on the user or move the user to a different group.

The admin center surfaces errors on the affected user's Licenses and apps pane and in the group-based licensing error view; Microsoft Graph exposes the same data via the user's licenseAssignmentStates .

Monitoring Licenses & Subscriptions

Monitoring lives in Billing → Licenses and Billing → Your products . Key views:

License usage per SKU — assigned vs. available vs. expired counts; spot SKUs running low before users fail to get licensed.

Expiring subscriptions — subscriptions nearing renewal or expiry, including trials about to lapse.

Trial-to-paid conversion — a trial subscription can be converted to a paid subscription from the subscription's details page; converting preserves the tenant's data and configuration rather than letting the trial expire and removing services.

Bill notifications — configure billing notification contacts so the right people are alerted before a subscription auto-renews or lapses.

• Concept Behavior
• SKU A product bundle you buy; the assignable license unit
• Service plan An individual workload inside a SKU; can be disabled per user via disabledPlans
• Direct assignment License tied to the user object; must be removed manually
• Group-based inheritance License tied to group membership; Entra ID adds/removes license as membership changes
• Assignment state Assigned, Pending, or Error; errors must be remediated explicitly
• Usage location Required country code on the user before any license can be assigned