Licensing
Active Directory and Azure Active Directory are licensed based on the total number of enabled AD user accounts. This number is arrived at by taking the higher of the following two counts:
-
The total number of enabled user accounts in all Active Directory domains being managed with the product. An Active Directory domain is being managed by the product when there is a Commvault agent installed on at least one of the domain controllers in that domain.
-
The total number of enabled user accounts in all Azure AD tenants being managed with the product. An Azure AD tenant is being managed by the product if it has been configured for backups in Commvault.
If the number of enabled user accounts in the AD domains is higher than the number of enabled user accounts in the Azure AD tenants, then licenses are required for the number of enabled user accounts in the AD domains and those licenses cover both the AD and Azure AD workloads.
Conversely, if the number of enabled user accounts in the Azure AD tenants is higher than the number of enabled user accounts in the AD domains, then licenses are required for the number of enabled user accounts in the Azure AD tenants and those licenses cover both the Azure AD and AD workloads.
An enabled user account is any user account in the directory which has not been set to disabled.
An Active Directory license is required to enable any new capabilities introduced in Commvault Platform Release 2024E (11.36) including AD domain wide comparisons, Group Policy protection, and backup of Entra ID roles and conditional access policies.