Identify the core features and objects of Microsoft 365 services
Tenant Configuration and Licensing
Understand the tenant-level objects and license assignments that determine who can use Microsoft 365 capabilities.
What you need to know
- A user needs the required product license and enabled service plan before a licensed feature becomes available.
- Group-based licensing applies licenses through supported group membership and helps administrators manage access at scale.
- Microsoft 365 admin center organization settings cover tenant-wide configuration; Domains is used to add and verify custom domains.
Objects and administrative surfaces
- Users, supported groups, product licenses, and service plans — Microsoft 365 admin center and Microsoft Entra admin center.
- Custom domains and organization profile/settings — Microsoft 365 admin center.
How it works
- A product license contains service plans. Disabling an individual service plan can remove that workload while leaving the broader product license assigned.
- For group-based licensing, membership changes drive assignment changes; administrators should review assignment errors such as unavailable seats or invalid usage locations.
When to use it
- Use direct assignment for a small exception and group-based assignment for repeatable role- or department-based access.
- Check domain verification and DNS configuration when users need addresses in a custom domain.
Security and governance implications
- Use the least-privileged License, User, or Groups administrator role appropriate to the task.
- Removing a license is not a substitute for offboarding, retention, or account blocking.
Troubleshooting signals
- Confirm the user has the correct license, the required service plan is enabled, a seat is available, and usage location is valid.
- For domain issues, confirm ownership verification and required DNS records.
Exam traps
- A license grants entitlement; a security group alone does not create a mailbox or override a disabled service plan.
- The Microsoft 365 admin center manages tenant settings; workload-specific settings usually belong in the workload admin center.
Key takeaways
- License → service plan → feature access.
- Use groups for scalable assignment and inspect assignment errors before retrying.
Related objectives
- D1.1.a
- D1.1.b