Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Office 365 license management
Set-StrictMode -Version 2
# Connect first
# Connect-AzureAD
function Get-LicencesforUser
{
param([object]$user)
# $user should be populated with
# $user = Get-AzureADUser -ObjectId username@domain.com
$ret = @()
$currentLicences = $user | select -ExpandProperty AssignedLicenses
foreach ($currentLicense in $currentLicences) {
$ret += ($licenses | where { $_.skuId -eq $currentLicense.SkuID }).SkuPartNumber
}
return $ret
}
# Find the SKU of the ATP license and create an object that can be applied
$licenses = Get-AzureADSubscribedSku
$atp = $licenses | where { $_.skuPartNumber -eq 'ATP_ENTERPRISE' }
$atpLicense = New-Object -TypeName Microsoft.Open.AzureAD.Model.AssignedLicense
$atpLicense.SkuId = $atp.SkuId
$licensesToAssign = New-Object -TypeName Microsoft.Open.AzureAD.Model.AssignedLicenses
$licensesToAssign.AddLicenses = $atpLicense
#Show License on User - example
#$user = Get-AzureADUser -ObjectId user@thing.com
#Get-LicencesforUser -user $user
$allActiveUsers = Get-AzureADUser -All $true | where { $_.AccountEnabled -eq $true -and $_.immutableid -ne $null }
#Get SkuID for Office E2
$e2sku = ($licenses | where { $_.skuPartNumber -eq 'STANDARDWOFFPACK' }).SkuID
$e5secsku = ($licenses | where { $_.skuPartNumber -eq 'IDENTITY_THREAT_PROTECTION' }).SkuID
$count = 0
foreach ($activeUser in $allActiveUsers) {
$currentLicences = $activeUser| select -ExpandProperty AssignedLicenses
if (!($currentLicences | where { $_.skuid -contains $e2sku })) {
write-host "User $($activeUser.UserprincipalName) has no E2"
continue
}
if ($currentLicences | where { $_.skuid -contains $atp.SkuID }) {
write-host "User $($activeUser.UserprincipalName) already has an ATP License"
continue
}
if ($currentLicences | where { $_.skuid -contains $e5secsku }) {
write-host "User $($activeUser.UserprincipalName) already has an E5 Sec License"
continue
}
write-host "Now applying ATP to $($activeUser.UserprincipalName)"
$count += 1
# Set-AzureADUserLicense -ObjectId $activeUser.ObjectId -AssignedLicenses $licensesToAssign
}
write-host "Applied $count licences"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment