How to Assign Exchange Online Plan 2 Using Dynamic Group Rules
Question details
The user needs to assign a standalone Exchange Online Plan 2 license to users via a dynamic group rule without accidentally consuming broader Microsoft 365 E5 licenses.

- Product
- Exchange Online
- Device & OS
- not provided
- Scenario
- Configuring Microsoft Entra dynamic group membership and licensing rules to accurately provision standalone email service plans.
- Observed behavior
- When applying dynamic rules based on the Exchange Online Plan 2 service plan ID, the system consumes E5 licenses instead of the standalone Exchange Online Plan 2 licenses.
Ensure you have the License Administrator or Global Administrator role assigned in Microsoft Entra ID, and verify that your tenant has sufficient available standalone Exchange Online Plan 2 licenses.
Assign the Standalone License via Group-Based Licensing Using SKU GUID
Instead of relying on the service plan ID within the membership rule, use Entra ID group-based licensing to apply the specific standalone SKU GUID to your dynamic group.
A dynamic membership rule defines who belongs to a group based on user attributes, but it does not dictate which specific license SKU to assign. Because the service plan ID for Exchange Online Plan 2 is also bundled inside Microsoft 365 E5 licenses, filtering by the service plan ID can inadvertently consume E5 entitlements. To resolve this, you must apply the exact standalone license SKU to the group.
Sign in to the Microsoft Entra admin center, expand 'Identity', and select 'Groups' > 'All groups'.
Search for and select the dynamic group you have created for your Exchange Online Plan 2 users.
In the group's left-hand navigation menu, select 'Licenses' under the Manage section.
Click 'Assignments' at the top of the page. Under 'Select licenses', choose the standalone 'Exchange Online (Plan 2)' license, which corresponds to the GUID 19ec0d23-8335-4cbd-94ac-6050e30712fa, and not the E5 bundle.
Ensure only the specific service plans you want to enable are checked, then click 'Save'. The standalone licenses will now be assigned to all members of the dynamic group.

Filter Out Existing E5 Users in the Dynamic Rule
Modify your dynamic membership rule syntax to explicitly exclude users who already possess the service plan, preventing redundant license assignment.
Simplify Document Management with WPS Office
Enterprise licensing in Microsoft 365 can be complex and expensive. If you are looking for a highly compatible, budget-friendly solution for your organization's document creation needs, WPS Office provides a lightweight and intuitive alternative without the complicated subscription management.

Frequently Asked Questions
Why does using the Exchange Online Plan 2 service plan ID consume an E5 license?
The service plan ID (efb87545-963c-4e0d-99df-69c6916d9eb0) identifies the Exchange service itself, which is bundled inside broader license SKUs like Microsoft 365 E5. When a rule triggers based on this service ID, Entra ID may fulfill the requirement using an available E5 entitlement instead of a standalone license.
Can a dynamic membership rule assign a specific license by itself?
No. A dynamic membership rule's sole purpose is to determine which users are added to or removed from a group based on their profile attributes. The actual license assignment occurs separately through Microsoft Entra group-based licensing.
What is the correct GUID for the standalone Exchange Online Plan 2 license?
The SKU GUID for the standalone Exchange Online Plan 2 license is 19ec0d23-8335-4cbd-94ac-6050e30712fa. Using this GUID when configuring group-based licensing ensures the correct standalone license is consumed.




