← cd ~/licences
// licences · sku
Workload_Identities_Premium_CNWorkload Identities Premium
Workload_Identities_Premium_CN is the SKU part number Microsoft uses for Workload Identities Premium. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.
| Product name | Workload Identities Premium |
|---|---|
| String ID (SkuPartNumber) | Workload_Identities_Premium_CN |
| GUID (SkuId) | 73fa80b5-689f-4db9-bbe4-bd414bc41e44 |
| Service plans | 2 |
Service plans included (2)
| Service plan | Name | ID |
|---|---|---|
AAD_WRKLDID_P1 | Microsoft Entra Workload ID P1 | 84c289f0-efcb-486f-8581-07f44fc9efad |
AAD_WRKLDID_P2 | Microsoft Entra Workload ID P2 | 7dc0e92d-bf15-401d-907e-0884efe7c760 |
Is it in your tenant?
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "Workload_Identities_Premium_CN" |
Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }Assign it to a user
For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
-AddLicenses @{ SkuId = "73fa80b5-689f-4db9-bbe4-bd414bc41e44" } -RemoveLicenses @()Who has it?
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq 73fa80b5-689f-4db9-bbe4-bd414bc41e44)" `
-ConsistencyLevel eventual -CountVariable n -All |
Select-Object DisplayName, UserPrincipalNameSimilar licences
These share the most service plans with Workload_Identities_Premium_CN.
Workload_Identities_P2Microsoft Entra Workload ID · 50% overlap