See How Hire2Retire Can Drive Success for Your Organization |17th Jan 2025|
How to Automate Microsoft Group-Based License Management with Hire2Retire
Hire2Retire, RoboMQ’s flagship employee lifecycle management product, auto-provisions employee profiles on a “need-to-know” basis through its industry-leading Role-Based Access Control (RBAC). Hire2Retire’s RBAC doesn’t just work on an individual level, though. It can work with Microsoft Group-Based Licensing to make Microsoft software license management a breeze.

What is Microsoft Group-Based Licensing?

Microsoft Group-Based Licensing allows you to manage license allocation within your organization through security-enabled groups instead of on an individual level. This collective license management makes it easy to allocate and track Microsoft software usage on an enterprise-grade scale. Here is how you can set up Microsoft Group-Based Licensing and integrate it within your Hire2Retire workflow:

Configuring Microsoft Security-Enabled Groups

To use Microsoft Group-Based Licensing, your organization needs one of the following licenses:
Azure AD Premium (P1 or P2)
Microsoft 356 (E3 or E5)
Once you have selected the group to assign licenses to, select the Licenses tab, and click Assignments. Then, click Assign and select all the licenses you want to assign to the group. When you are done, click Save. Repeat this process for as many security-enabled groups as needed.
A screenshot showing how to create Microsoft Groups.
Your organization will also need at least one security-enabled group to which license privileges can be allocated. To create or select a security-enabled group, go to the Azure portal, and navigate to the Groups page under Azure Active Directory. Then, you can either select an existing group or click New Group to create a new group.
A screenshot showing how to create a new group in Microsoft.

Automating License Management in Hire2Retire

Once you have set up your security group rules, Hire2Retire will auto-provision employee profiles along those rules, keeping employee access on a “need-to-know basis.” With Hire2Retire’s RBAC and Microsoft Group-Based Licensing, access provisioning can be simple and easy!
A Hire2Retire workflow showcasing the group memberships section.
Once you have defined security-enabled groups and configured license privileges, log into your Hire2Retire workflow. In the Identity section of your workflow, select the Group Memberships step. You can then configure group membership assignments in the Security Group sub-menu using Hire2Retire’s rule tables. For example, you can create a rule to assign every employee in a New York office to one security group, and every employee in a Los Angeles office to another security group. You can also use AND/OR statements to create custom rules tailored to your organization’s exact needs.

Join The Employee Lifecycle Automation Movement

Other companies use Hire2Retire to achieve up to 90% cost avoidance on employee lifecycle management. Book a discovery call with a Hire2Retire expert now to learn how your organization can too.

About Hire2Retire

Hire2Retire, RoboMQ’s flagship product, handles hundreds of thousands of employee identities. Companies worldwide use Hire2Retire to reduce the cost of creating and managing employee accounts in AD or Azure AD, eliminating tasks often done using costly sysadmin resources. Hire2Retire ensures employee profiles are created in AD, Azure AD, and identity systems in near real-time per their HR profile and role. This ensures employees have the right access and privileges to provide a superior “First Day at Work” experience. Similarly, employee access is removed in near real-time upon termination, ensuring the terminated employees do not walk away with privileged access preventing data security and reputation risks.

About RoboMQ

RoboMQ is a leading SaaS company that solves critical Business Process Automation problems and improves operational effectiveness by application of API and data integration technologies combined with intuitive, modern, and humanized UX, workflows, and advanced algorithms.
Picture of Cameron Macaulay

Cameron Macaulay

Cameron Macaulay is a Marketing Associate with RoboMQ. Cameron graduated from Syracuse University with a major in Broadcast & Digital Journalism, and a minor in Professional & Technical Writing. Cameron combines his skills in technical writing with a passion for storytelling.