How you assign, add, remove, and reduce licenses depends on whether you have:
- The free or Premium edition of Cloud Identity
- One edition of Cloud Identity, both editions, or Cloud Identity with another paid service, such as Google Workspace.
Cloud Identity free edition
Assign licensesThe free edition of Cloud Identity uses site-based licensing, which means you don’t need to assign licenses. When you add a new user, they automatically get a free Cloud Identity license. They also get any licenses you assign for a different service, such as Google Workspace or Cloud Identity Premium.
If you need more free Cloud Identity users, simply add the users you want. They’re assigned a Cloud Identity license automatically. See Add users individually.
The number of free Cloud Identity users you can create depends on your user cap. See Your Cloud Identity free edition user cap.
You can’t remove a user’s free Cloud Identity license or cancel your free Cloud Identity subscription to reduce the number of licenses.
If a user no longer needs free Cloud Identity features, you can delete the user.
If the user needs more features, you can assign the user a Google Workspace or Cloud Identity Premium license. See Assign, remove, and reassign licenses.
Cloud Identity Premium
Expand all | Collapse all & go to top
Assign licensesCloud Identity Premium uses user-based licensing. If Cloud Identity Premium is your only Google service, everyone in your organization automatically gets a Cloud Identity Premium license.
Otherwise, assign licenses to users after you sign up for Cloud Identity Premium. You can automatically or manually assign licenses to:
- Individual users
- Everyone in an organizational unit
- Everyone in your entire organization
With Cloud Identity on the Annual Plan, you can assign as many licenses as you bought. (If you try to assign more, you get an error message.) If you need more licenses, you can:
Automatic license assignment
If licenses aren’t assigned by default and everyone in your organization needs Cloud Identity Premium, you can turn on automatic license assignment. This provides a license to users in your account who don’t have a Premium license and any new users you add later. See Automatically assign a license to every user in your organization.
Existing user licenses for other services don’t change on any level.
If you have organizational units under your top-level organization, you can set automatic licensing options for specific organizational units.
Manual license assignment
You can manually assign Cloud Identity Premium licenses to:
- Individual users
- An uploaded list of users
- An entire organizational unit
For details, see Assign, remove, and reassign licenses.
If you manually assign licenses to an organization, only users in that organization get a license. Users in child organizations don’t automatically get a license—manually assign those as well.
If you need more Cloud Identity Premium users, the way that you add licenses depends on whether you signed up on the Annual or Flexible Plan. For details, see Get more licenses.
Note: During your free trial period for Cloud Identity Premium, you can add up to 50 users. See About your free Cloud Identity Premium trial.
If a user no longer needs access to the Cloud Identity Premium features, you can remove the user’s license following the steps in Assign, remove, and reassign licenses.
The way to reduce your Cloud Identity Premium license count depends on whether you signed up on the Annual or Flexible Plan. For details, see Reduce licenses.
If you have multiple services
The licensing rules for Cloud Identity vary based on the combination of subscriptions.
If you have Google Workspace for Education or Google Workspace for Nonprofits, you can't add Cloud Identity licenses.
Expand all | Collapse all & go to top
Cloud Identity free edition & PremiumIf you have both the Premium and free editions of Cloud Identity, all new users automatically get free Cloud Identity licenses. If some users need to use features like application whitelisting and rules-based management, assign those users a paid Cloud Identity Premium license.
If you have automatic licensing turned on for Cloud Identity Premium for your entire organization, all new users automatically get paid Premium licenses. To ensure that new users get only free Cloud Identity licenses, we recommend that you turn off automatic licensing for Cloud Identity Premium.
You can set different automatic licensing options for specific organizations for assigning paid Premium licenses to those users. You can also manually assign Premium licenses to individual users. If you remove a user’s Premium license, the user gets a free Cloud Identity license automatically.
Example: Say you have 250 total users, and you assign Cloud Identity Premium licenses to 100 of them. You now have:
- 100 users with both free Cloud Identity and Cloud Identity Premium
- 150 users with free Cloud Identity only
Related topics
If you have both Google Workspace and the free edition of Cloud Identity, all new users automatically get free Cloud Identity licenses. If some users need access to features like Gmail and Google Calendar, assign those users a paid Google Workspace license.
If you have automatic licensing turned on for Google Workspace for your entire organization, all new users automatically get paid Google Workspace licenses. To ensure that new users get only free Cloud Identity licenses, we recommend that you turn off automatic licensing for Google Workspace during Cloud Identity setup.
After Cloud Identity setup, you can set different automatic licensing options for specific organizations to automatically assign paid Google Workspace licenses to those users. You can also manually assign Google Workspace licenses to individual users. If you remove a user’s Google Workspace license, they keep their free Cloud Identity license.
Example: Say you have 250 total users, and you assign Google Workspace licenses to 100 of them. You now have:
- 100 users with both free Cloud Identity and Google Workspace
- 150 users with free Cloud Identity only
Related topics
If you have both Google Workspace and Cloud Identity Premium, all new users automatically get paid licenses to whichever service you signed up for first. After you sign up for the second service, you can automatically or manually assign licenses to that service. You can assign a user both types of licenses.
You can change your automatic licensing settings at any time from the Billing page. You can turn automatic licensing on or off for either or both services for your entire organization or an organizational unit.
Related topics
If you have both editions of Cloud Identity and Google Workspace, all users get a free Cloud Identity license automatically. You can assign a user licenses to one or both of the paid services.
You can’t remove a user’s free Cloud Identity license. It stays in effect even if you assign licenses to one or both of the paid services.
You can turn on automatic license assignment for one or both of the paid services for your top-level organization. This means all new users in your organization automatically get a license for that service.
You can also set different automatic licensing options for specific organizational units. This way, users in an organization get only the free or paid licenses they need.
If you have automatic licensing turned on for Google Workspace at the top level and then sign up for the free edition of Cloud Identity, during signup, you’re prompted to turn off Google Workspace automatic licensing. This ensures that users who only need the free Cloud Identity features are assigned only that license.
If you remove all of a user’s paid licenses, the user keeps their free Cloud Identity license.