from One Identity documentation...
"Enabled User Accounts are all the user accounts in the domain(s) to be managed by the Software, including, but not limited to, users' logon accounts, secondary accounts tied to users, administrative accounts, service accounts, test accounts, and iNetOrgPerson objects. The license quantity for Software licensed by this License Type must be at least the total number of accounts (regardless of account type) in the domain(s) or other logical group of accounts with which the Software is to be used."
This One Identity licensing definition is quite confusing and somewhat outdated, in my opinion.
When it comes to EntraID, it gets even more confusing, as there's nothing clearly written about cloud objects, especially in the complex cross-tenant scenario.
In the scenario where Active Roles is connected to EntraID/M365, what's the difference in Active Roles licensing requirements between Enabled User and Managed Person for EntraID objects (hybrid/cloud-only/Guests/cross-tenant guests)?
Guests are accounts from another organization and, therefore, not from the company that owns the Active Roles. Do I still have to pay for an Active Roles license for it?
It's common to create multiple guest accounts in MS Teams, for example, and if that's the case, it doesn't make sense to me that companies should have to purchase Active Roles licenses to manage accounts that aren't theirs.
Many questions and few clear answers. :-(