Skip to content

Entra ID Groups with Licences

The question it answers: Which groups assign licences, and which licences do they assign?

Where in the appLicensing › Groups › Groups With Licences
WorkloadEntra ID
KindTable
DataRead from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). It reads through PowerShell (Exchange Online or SharePoint Online), so the first load takes longer than a Graph report.
LicenceMicrosoft Entra ID P1 (group-based licensing).
Report id (API and MCP)entra.groups.licence-groups
ColumnKeyType
Display NameDisplayNameText
LicencesLicenseDisplayNamesText

Licence: Microsoft Entra ID P1 (group-based licensing).

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
Group.Read.AllMicrosoft GraphRead all groups
Organization.Read.AllMicrosoft GraphRead organization information
Data sources it reads
  • PowerShell: Get-MgGroup -All -Property Id, MailNickname, DisplayName, GroupTypes, Description, AssignedLicenses
  • PowerShell: Get-MgSubscribedSku -All (once)
GET /ir-api/v1/reports/entra.groups.licence-groups?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.groups.licence-groups. The client needs the Read grant for Entra ID. See Using the API.