Question

Contoso assigns Microsoft 365 E5 licenses through two dynamic security groups: 'All-Employees' (assigns the full E5 license) and 'Legal-Restricted' (assigns E5 but with the Exchange Online service plan disabled to meet a compliance hold). A legal team member belongs to both groups. Their account currently shows a license assignment error, and Exchange Online is not functioning as expected. Which action correctly resolves the conflict so the user retains a working E5 license while honoring the most restrictive intent?

Accepted Answer

Because both groups assign the same E5 product, the user consumes only one license and the enabled service plans are the union of both groups; disable Exchange Online at the group level or resolve via a single authoritative group.

Answer

Assign the E5 license directly to the user account, which overrides all group-based assignments and clears the error.

Answer

Remove the user from both groups and rely on a dynamic membership rule to reassign the license automatically.

Answer

Purchase a second E5 license so each group assignment consumes its own SKU and the plans no longer conflict.