Articles in this section

See more
Print

Text File | Enforce License rule

Avatar
Tatiana Golubovich
  • Updated
Follow

Rule description

This rule queries the specified CSV file containing a list of Active Directory or MS365 users and assigns licenses according to the Action section settings.

Note: CSV-file should be in UTF-8 format in case of using letters with an accent: á, ä, é, í, ö, ü and etc.

 

When to use this rule

Use this rule when you need to enforce Microsoft 365 licenses to the Active directory or Microsoft 365 users that are specified in the CSV file.

This rule requires a source text file in the comma-separated variable format (CSV). You can use the template CSV files provided with the rule, or create a file in Microsoft Excel and export as CSV.

To use a template CSV file: 

  1. In the Query section, click the [...] button next to the Select Data Source setting.

  2. Open the Templates folder.

  3. Depending on the Account source system, select Enforce Office 365 License (Hybrid) or Enforce Office 365 License (Microsoft 365) CSV file.

  4. Click Open. 

The Query's source text file requires the following CSV (comma-separated value) format:

Hybrid users:

UserPrincipalName,DistinguishedName,SamAccountName,ObjectGuid
Joe.Smith@domain.com,"CN=Joe Smith,OU=IT,DC=domain,DC=com",jsmith,dd16cabd-b1a6-4fc4-b5b6-d86d8d8fca9e
Kelly.Jones@domain.com,"CN=Kelly Jones,OU=IT,DC=domain,DC=com",kjones,84da7c1e-69f8-48d9-afae-cc61bbf85be2

 

Microsoft 365 users:

UserPrincipalName,ObjectGuid
Joe.Smith@domain.com,dd16cabd-b1a6-4fc4-b5b6-d86d8d8fca9e
Kelly.Jones@domain.com,84da7c1e-69f8-48d9-afae-cc61bbf85be2

 

Rule Settings

Query Section

Setting name Description

Select data source

Specifies the text file to be imported.

The […] button allows the user to browse for the file and the Create/Edit button allows the creation or editing of the existing file in the built-in Data Source editor.

If you need to enforce licenses to hybrid users use Enforce Office 365 License (Hybrid) - Template.csv.

If you need to enforce licenses to Microsoft 365 users use Enforce Office 365 License (Microsoft 365) - Template.csv.

Data source anchor attribute

Select a column in the data source that contains the attribute value for identifying and mapping a user like UserPrincipalName.

Account source system

Select the source system of the accounts listed in the CSV file: Hybrid or Microsoft 365.

User anchor attribute

Automap searches for a user using the standard identity attribute DistinduishedName, UserPrincipalName, and ObjectGUID.

Select a custom attribute if your users are identified by a different attribute.

Note: Microsoft best practices assume the Active Directory and Office 365/Azure AD UPNs will match. 

More Options

 

Filter CSV data

This setting specifies the filter that can remove data rows from the imported text file that satisfies the specific condition.

Properties to display

To display additional properties for each object found by the query, add those properties to the list.

Filter Office 365 users

To hide unwanted data set the filtering conditions here.

 

Action Section

Setting name Description

License options

Select which Microsoft 365 licenses and apps/services should be updated for the users:

  1. Assign - license and its apps and services will be assigned to the users.
  2. Assign (partially) - license and some of its apps and services will be assigned to the users.
  3. Update apps - license should be already assigned to the users and only its' apps and services will be updated. If the license is not assigned its apps and services won't be updated for the users.
  4. Unassign - license and its apps and services will be revoked.
  5. Ignore - license and its apps and services won't be taken into consideration. Those users that have this license and its apps and services assigned would preserve them. Those users that don't have this license and its apps and services assigned would preserve that state.

License's apps and services can be set to Enable, Disable or Ignore.

All other licenses settings mean all other licenses that are not specified in License options. They can be ignored or unassigned.

Change UsageLocation only if not set

Specify whether to keep the current user's usage location or change it to a new one.

Usage Location

Select the usage location.

Important: If Microsoft 365 user accounts don't have a location attribute set, Microsoft 365 license won't be applied to them, and the rule will stop with the error.

If you use Usage Location from AD value for this setting, you must be sure all Active Directory user accounts, that fall under this rule, have the country set.

If the country that is specified for the Active Directory user account is different from the value of the usage location that is specified in this rule then the Country\region setting will be empty when you open Microsoft 365 License web action for the user. That is to info the administrator that Contry\region is different for Active Directory and Microsoft 365 user accounts.

 

 

Output Section

This section defines the output format of this rule.

To get more information about this section, please see the Output section article.

 

Enforce/Schedule section

This section defines the schedule for how often to run the rule.

To get more information about this section, please see the Enforce/Schedule section article.

 

 Change History

Version Notes
9.3.0 The rule has been introduced in the product.

 

Related articles

Comments

0 comments

Please sign in to leave a comment.