azureblog.co.uk
← cd ~/licences
// licences · sku

ADALLOM_STANDALONEMicrosoft Cloud App Security

ADALLOM_STANDALONE is the SKU part number Microsoft uses for Microsoft Cloud App Security. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.

Product nameMicrosoft Cloud App Security
String ID (SkuPartNumber)ADALLOM_STANDALONE
GUID (SkuId)df845ce7-05f9-4894-b5f2-11bbfbcfd2b6
Service plans3

Service plans included (3)

Service planNameID
EXCHANGE_S_FOUNDATIONExchange Foundation113feb6c-3fe4-4440-bddc-54d774bf0318
M365_AUDIT_PLATFORMMicrosoft 365 Audit Platformf6de4823-28fa-440b-b886-4783fa86ddba
ADALLOM_S_STANDALONEMicrosoft Defender for Cloud Apps2e2ddb96-6af9-4b1d-a3f0-d6ecfd22edb2

Is it in your tenant?

powershell3 lines
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "ADALLOM_STANDALONE" |
    Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }

Assign it to a user

For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.

powershell3 lines
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
    -AddLicenses @{ SkuId = "df845ce7-05f9-4894-b5f2-11bbfbcfd2b6" } -RemoveLicenses @()

Who has it?

powershell4 lines
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq df845ce7-05f9-4894-b5f2-11bbfbcfd2b6)" `
    -ConsistencyLevel eventual -CountVariable n -All |
    Select-Object DisplayName, UserPrincipalName

Search all 620 SKUs →

Sources