How licensing works for Cloud Identity

How you assign, add, remove, and reduce licenses depends on whether you have:

  • The free or Premium edition of Cloud Identity
  • One edition of Cloud Identity, both editions, or Cloud Identity with another paid service, such as G Suite

Cloud Identity free edition

Assign licenses

The free edition of Cloud Identity uses site-based licensing, which means you don’t need to assign licenses. When you add a new user, they automatically get a free Cloud Identity license. They also get any licenses you assign for a different service, such as G Suite or Cloud Identity Premium.

Add licenses

If you need more free Cloud Identity users, simply add the users you want. They’re assigned a Cloud Identity license automatically.

The number of free Cloud Identity users you can create depends on your user cap.

Remove or reduce licenses

You can’t remove a user’s free Cloud Identity license or cancel your free Cloud Identity subscription to reduce the number of licenses.

If a user no longer needs free Cloud Identity features, you can delete the user. If the user needs more features, you can assign the user a G Suite or Cloud Identity Premium license.

Cloud Identity Premium

Assign licenses

Cloud Identity Premium uses user-based licensing. If Cloud Identity Premium is your only Google service, everyone in your organization automatically gets a Cloud Identity Premium license.

Otherwise, assign licenses to users after you sign up for Cloud Identity Premium. You can automatically or manually assign licenses to:

  • Individual users
  • Everyone in an organizational unit
  • Everyone in your entire organization

With Cloud Identity on the Annual Plan, you can assign as many licenses as you bought. (If you try to assign more, you get an error message.) If you need more licenses, delete users or get more licenses.

Automatic license assignment

If licenses aren’t assigned by default and everyone in your organization needs Cloud Identity Premium, you can turn on automatic license assignment. This provides a license to users in your account who don’t have a Premium license and any new users you add later.

Existing user licenses for other services don’t change on any level.

If you have organizational units under your top-level organization, you can set automatic licensing options for specific organizational units.

Manual license assignment

You can manually assign Cloud Identity Premium licenses to:

  • Individual users
  • An uploaded list of users
  • An entire organizational unit

For details, see Assign, remove, and reassign licenses.

If you manually assign licenses to an organization, only users in that organization get a license. Users in child organizations don’t automatically get a license—manually assign those as well.

Add licenses

If you need more Cloud Identity Premium users, the way that you add licenses depends on whether you signed up on the Annual or Flexible Plan. For details, see Get more licenses.

Note: During your free trial period for Cloud Identity Premium, you can add up to 50 users.

Remove licenses

If a user no longer needs access to the Cloud Identity Premium features, you can remove the user’s license following the steps in Assign, remove, and reassign licenses.

The way to reduce your Cloud Identity Premium license count depends on whether you signed up on the Annual or Flexible Plan. For details, see Reduce licenses.

If you have multiple services

The licensing rules for Cloud Identity vary based on the combination of subscriptions.

Cloud Identity free edition + Premium

If you have both the Premium and free editions of Cloud Identity, all new users automatically get free Cloud Identity licenses. If some users need to use features like application whitelisting and rules-based management, assign those users a paid Cloud Identity Premium license.

If you have automatic licensing turned on for Cloud Identity Premium for your entire organization, all new users automatically get paid Premium licenses. To ensure that new users get only free Cloud Identity licenses, we recommend that you turn off automatic licensing for Cloud Identity Premium.

You can set different automatic licensing options for specific organizations for assigning paid Premium licenses to those users. You can also manually assign Premium licenses to individual users. If you remove a user’s Premium license, the user gets a free Cloud Identity license automatically.

Cloud Identity free edition + G Suite

If you have both G Suite and the free edition of Cloud Identity, all new users automatically get free Cloud Identity licenses. If some users need access to features like Gmail and Google Docs, assign those users a paid G Suite license.

If you have automatic licensing turned on for G Suite for your entire organization, all new users automatically get paid G Suite licenses. To ensure that new users get only free Cloud Identity licenses, we recommend that you turn off automatic licensing for G Suite during Cloud Identity setup.

After Cloud Identity setup, you can set different automatic licensing options for specific organizations to automatically assign paid G Suite licenses to those users. You can also manually assign G Suite licenses to individual users. If you remove a user’s G Suite license, they keep their free Cloud Identity license.

Cloud Identity Premium + G Suite

If you have both G Suite and Cloud Identity Premium, all new users automatically get paid licenses to whichever service you signed up for first. After you sign up for the second service, you can automatically or manually assign licenses to that service. You can assign a user both types of licenses.

You can change your automatic licensing settings at any time from the Billing page. You can turn automatic licensing on or off for either or both services for your entire organization or an organizational unit.

Cloud Identity free edition + Premium + G Suite

If you have both editions of Cloud Identity and G Suite, all users get a free Cloud Identity license automatically. You can assign a user licenses to one or both of the paid services.

You can’t remove a user’s free Cloud Identity license. It stays in effect even if you assign licenses to one or both of the paid services.

You can turn on automatic license assignment for one or both of the paid services for your top-level organization. This means all new users in your organization automatically get a license for that service.

You can also set different automatic licensing options for specific organizational units. This way, users in an organization get only the free or paid licenses they need.

If you have automatic licensing turned on for G Suite at the top level and then sign up for the free edition of Cloud Identity, during signup, you’re prompted to turn off G Suite automatic licensing. This ensures that users who only need the free Cloud Identity features are assigned only that license.

If you remove all of a user’s paid licenses, the user keeps their free Cloud Identity license.

Was this article helpful?
How can we improve it?