'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Investigate Azure AD Premium P1 Changed to Free
Question details
An administrator needs to determine why an active Azure AD Premium P1 tenant license unexpectedly downgraded to Azure AD Free.
- Product
- Microsoft Azure AD / Entra ID
- Device & OS
- not provided
- Scenario
- Attempting to manage Conditional Access policies, which are now locked due to a missing premium license.
- Observed behavior
- The tenant displays an Azure AD Free license despite previously holding Premium P1, preventing any policy changes and requiring investigation into licensing audit records.
Ensure you are signed in to the Microsoft 365 admin center or Microsoft Entra admin center with a Global Administrator or Billing Administrator account to view licensing details and audit logs.
Review Billing and Subscriptions in Microsoft 365 Admin Center
Verify the current status of your licenses, partner agreements, and trial expirations that may have caused the downgrade.
Often, a license downgrade happens due to an expired trial, a lapse in billing, or changes made by a Cloud Solution Provider (CSP) partner. Reviewing the billing portal is the fastest way to confirm your license validity.
Log in to the Microsoft 365 admin center with your administrator credentials.
On the left navigation pane, click on 'Billing' and then select 'Your products'.
Look for the Azure AD Premium P1 or Enterprise Mobility + Security subscription. Check if its status is marked as expired, canceled, or disabled.
If you purchase licenses through a partner, navigate to the 'Billing' > 'Billing accounts' or 'Partner relationships' section to see if there was a lapse in your agreement.
Investigate Licensing Changes via Audit Logs
Use Microsoft Purview and Microsoft Entra audit logs to find exactly when and why the license changed.
Contact Microsoft Support
If audit logs do not reveal the root cause or if a backend error occurred, Microsoft Support must investigate.
Switch to WPS Office to Avoid Complex Licensing Constraints
Managing complex Microsoft 365 enterprise licenses and unexpected expirations can severely disrupt your business workflows. WPS Office provides a free, lightweight, and user-friendly alternative to Microsoft Office, ensuring your team can always create, edit, and collaborate without worrying about sudden license downgrades.
- 1. Download WPS Office: Visit the official WPS Office website and download the installer for your operating system.
- 2. Install the Software: Run the setup file and follow the on-screen instructions to complete a fast, lightweight installation.
- 3. Open Your Existing Documents: Launch WPS Office and instantly open your existing Word, Excel, and PowerPoint files with perfect formatting preservation.
Frequently Asked Questions
Why would my Azure AD Premium P1 suddenly downgrade to Free?
This typically occurs if a trial subscription expired, a payment method failed, a licensing partner adjusted your agreement, or if the licenses were manually unassigned from users by an administrator.
Can I edit Conditional Access policies without an Azure AD Premium P1 license?
No. Conditional Access is a premium feature. If your tenant downgrades to Azure AD Free, existing policies will continue to enforce, but you will be locked out of creating or modifying them until the Premium P1 license is restored.
How long are Microsoft 365 audit logs retained for investigating changes?
By default, Microsoft retains standard audit logs for 90 days. If the license change occurred further back than 90 days, it may not be visible in the standard audit search unless you have an advanced auditing policy in place.
Where can I find my Azure Tenant ID to give to Microsoft Support?
Sign in to the Microsoft Entra admin center, expand the 'Identity' menu on the left, and click 'Overview'. Your Tenant ID is a long string of alphanumeric characters listed under the 'Basic information' tab.
