Exam SC-300 topic 4 question 30 discussion

Answer is: Group 1: 500 - Guest users (4th example in the link) Group 2: 1 https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#example-license-scenarios

The correct answer is: Group 1: 500 Group 2: 1 Scenario = An administrator creates an access review of Group C with 50 member users and 25 guest users. Makes it a self-review. Calculation = 50 licenses for each user as self-reviewers.* Number of licenses = 50 * Azure AD External Identities (guest user) pricing is based on monthly active users (MAU), which is the count of unique users with authentication activity within a calendar month. This model replaces the 1:5 ratio billing model, which allowed up to five guest users for each Azure AD Premium license in your tenant. Refer to: https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#license-requirements

Group 1: Needed P2 licenses is 500. Reason is Guest users participating in access reviews do not require Azure AD Premium P2 licenses. Instead, they are covered under MAU-based billing (Monthly Active Users), which includes: 50,000 MAUs per month free. If group1 did not include the internal users and was guest only, they would not need ANY P2 licenses (just for your understanding). Which brings us to the 2nd question, that needs 1 P2 license seeing as the reviewer requires a P2 license to perform the review (as the guest users are not performing self review)

Group 1: 500 Group 2: 1

Box 1: 500 license for their core internal users. GUESTS < 50K = free, ID Governance Free while the ID Governance feature is in preview for External ID Box 2: 1 GUESTS < 50K = free, ID Governance Free while the ID Governance feature is in preview for External ID https://learn.microsoft.com/en-us/entra/external-id/customers/faq-customers#how-is-external-id-licensed

Box1 - 500 ( internal users), guests will ride on existing p2 users license Box 2- 1(guests will ride on existing p2 license)

As per Gemini 500 1

Group 1: 525 Group 2: 1 How many licenses must you have? Your directory needs at least as many Microsoft Entra ID Premium P2 licenses as the number of employees who will be performing the following tasks: Member users who are assigned as reviewers Member users who perform a self-review Member users as group owners who perform an access review Member users as application owners who perform an access review For guest users, licensing needs will depend on the licensing model you’re using. However, the below guest users’ activities are considered Microsoft Entra ID Premium P2 usage: Guest users who are assigned as reviewers Guest users who perform a self-review Guest users as group owners who perform an access review Guest users as application owners who perform an access review Microsoft Entra ID Premium P2 licenses are not required for users with the Global Administrator or User Administrator roles who set up access reviews, configure settings, or apply the decisions from the reviews.

2024 - this question has probably changed. no more 1:5 billing see https://learn.microsoft.com/en-us/entra/external-id/external-identities-pricing#about-monthly-active-users-mau-billing

The question wants to know who must have a P2 license. A P1 license does not support "Self-service entitlement management", but a P2 license does. Also for P2 it allows "Basic access certifications and reviews" 525 1 Since Group1 is self-reivew, they all need a P2 license. Since Group 2 is not, they could all have a P1 license except for the reviewer...

This section of the training from Microsoft states that guest users performing self-review will need a P2 license. https://learn.microsoft.com/en-us/training/modules/plan-implement-manage-access-review/2-plan-for-access-reviews Group1:525 Group2:1

There is no separation beetween normal user and guest users, according to this you pay for all users, regardless of who perform the access review -> https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals#access-reviews So the answear is: 525 395

Licences are not required for the guest users as they use the AD External Identities (guest user) licencing model where the first 50,000 monthly guest user activities are free.

Box 1: 500, because guest users may not count, depending on the agreement. Box2: 1, only the owner needs a license

Group 1: 525 ? Group 2: 1

525 - 1 https://learn.microsoft.com/en-us/azure/active-directory/governance/manage-guest-access-with-access-reviews

Going with 500 for the first one. In your Azure AD tenant, guest user collaboration usage is billed based on the count of unique guest users with authentication activity within a calendar month. This model replaces the 1:5 ratio billing model, which allowed up to five guest users for each Azure AD Premium license in your tenant. When your tenant is linked to a subscription and you use External Identities features to collaborate with guest users, you'll be automatically billed using the MAU-based billing model. Your first 50,000 MAUs per month are free for both Premium P1 and Premium P2 features. To determine the total number of MAUs, we combine MAUs from all your tenants (both Azure AD and Azure AD B2C) that are linked to the same subscription.