Contact us at 408.675.5020 or

Home Page

Knowledge Base Search     Advanced

Create and Verify Azure License Profiles for Office 365

Article ID: 1673
Last updated: 24 Mar, 2020

Identity Maestro server includes an Azure License Profile manager as a snap-in to MMC.  This utility provides the means to create, manage and remove license profiles that can be used with Create forms and Office 365 Manage tasks.  This article describes how to install the MMC snap-in and how to create a desktop console for the Azure License Profile Manager.

Applies to

  • Identity Maestro 4.1.1+ 

Getting Started

Prior to creating Azure license profiles, ensure that the following prerequisites have been met:

Understanding Azure License SKUs and Service Plans

Before creating Azure license profiles, it is important that you understand some Azure license terminology:

  • Azure License SKU.  Azure AD and Office 365 licenses online services by user seat count.  Each major online service or application is assigned one or more license SKUs, for example, Office 365 E3 and E5.  Office 365 licenses and license SKUs can be viewed in the Office 365 Admin portal under Billing > Subscriptions

    and Billing > Licenses.

  • Azure License Service Plans.  Each Azure license (SKU) is assigned to each Azure (Office 365) user and can be individually modified for each user.  A user is either activated (On) or deactivated (Off). A license SKU comprises a list of online applications and services referred to as service plans. Each service plan can be enabled or disabled by clicking on the On / Off slider bar. can be enabled or disabled.  By default, if enabled Azure will enable all of the service plans in that license SKU assignment to that user.

    The Active Users List will display the license status for each user.

Create Azure License Profiles

The Azure License Profile Manager provides a tool to build license profiles (similar to templates) that defines which service plans to enable and disable when assigning or modifying tan Azure license to an Azure AD user.  Identify Maestro allows an unlimited number of license profiles to be created.  License profiles do not require Azure AD Premium to apply license profiles.  Help desk staff can be provided the ability to manage Azure license assignment using Identity Meastro license profiles thus removing the need to provide HelpDesk staff with administrator access to the Office 365 Admin Portal where user license assignment is normally managed.

Use the Azure License Profile Manager desktop console to create license profiles: 

  1. Select the Azure License Profile Manager desktop console.  Right-click the desktop icon and select Run as administrator.

  2. In the "User Account Control" window, select Yes.

  3. In the Console navigation pane comprises nodes to represent management components.  To avoid UI timeouts, the Azure License Profile Manager does not read previously saved nodes.  As you expand the navigation menu, you need to Refresh the node you want to view and use. Right-click the Remote Agent for Azure AD node and select Refresh.

  4. The Azure License Profile Console should refresh to show the Office 365 subscription instance connection node.

  5. Expand the Remote Agent node. Right-click the Connection node and select Refresh.

  6. Expand the Connection node.  Right-click the Licensing node and select Refresh

  7. Once the License node is refreshed, you should see which Azure license SKUs are available in the Office 365 subscription instance.  If there are multiple license SKUs, each SKU will be represented by their own SKU tab.  In this example, the Small Premium Business (SPB) license SKU is available.  

    In the Actions pane (right), click the Create New Licensing Profile action.

  8. In the "Create New Licensing Profile" dialogue, provide a Profile Name.  The value must be lower case, no special characters, no periods, no spaces.  We recommend an easy to comprehend plain language value that matches a user role: examples include staffcontractorssalesreps, or helpdeskteam.

    Notice that the profile is associated to the O365 primary email domain name for the Connection node, and that a unique Profile ID is created.  This create action will create a license profile file that uses the Profile ID in the file name. 

    Click the Create Profile button.

  9. The License node will change to display a column with a column header that matches the Profile Name.  There will be checkboxes for each service plan.  All service plans will be checked (On) by default. 

    Uncheck service plans that you want to disable (Off).  In the Actions pane, select Save Changes to save the license profile.

    The Name column displays the name of the service plans provided through the connection from Azure AD.  Unfortunately, those names can be cryptic.  The default order of the service plans will normally match the order that license service plans are displayed if looking at the assigned license of an Office 365 user.  If you compare each, you should be able to determine what the service plans are.

    The Status column will normally display Success.  If Pending is displayed, that indicates that the service plan is scheduled to be introduced soon but is not currently available.  If you want the service plan to be assigned to the user, leave it checked (On).

    The Service Type column is provided to help you group service plans by type.

  10. Repeat steps 7, 8 and 9 to create additional license profiles.

  11. Click on a specific license profile node below the Licensing node.  The Profile ID will be visible.


  12. Close the Azure License Profile Manager desktop console when you have completed creating license profiles.

Confirm License Profiles in the Remote Agent Web Application

Azure license profiles are saved to files that are read and used by the Remote Agent for Azure AD web application.  You should be able to view license profiles using the Swagger feature.

To confirm Azure license profiles:

  1. Open a web browser on the Identity Maestro host server and go to

  2. Select Swagger UI.

  3. Expand the Licences list and select Get Licences.

  4. Scroll down and click the Try it out button.

  5. Scroll down to Responses and examine the information.  You should see information to confirm that all license profiles are being read by the Remote Agent for Azure AD web application.


    ID: this value should match the Profile ID value.

    Domain:  Should display the primary domain name of the Office 365 connection.

    LicensingProfileName:  This should display the value of the Profile Name.

    DisabledServicePlans:  This should display the list of service plans that were unchecked in the license profile in the Azure License Profile Manager desktop console.

  6. Close the web browser tab for the Remote Agent web application when you no longer need to use it.

This article was:   Helpful | Not helpful Report an issue

Article ID: 1673
Last updated: 24 Mar, 2020
Revision: 16
Views: 652
Comments: 0
print  Print email  Email to friend share  Share pool  Add to pool comment  Add comment
Prev     Next
Install and Configure the Azure License Profile Manager       Exchange 2013+