Modify License Allocation

Table of Contents

Modify License Allocation

This section contains instructions to modify your license allocation to other tenants.

You can increase or decrease license allocations for a tenant after activation. When you reduce a tenant’s allocation, the reduced quantity returns to your license pool, and you can reallocate it to another tenant to maximize license utilization across your organization. If you reduce license capacity for a Tenant Service Group (TSG), a fully allocated license automatically converts to a shared allocation.

When you purchase additional license capacity, it is no longer allocated to existing TSGs by default. Instead, you decide whether to assign the new capacity to the same TSG or distribute it across multiple TSGs, depending on your organization’s needs. For example, if you purchase additional licenses for a new tenant, you can directly allocate the new capacity to that tenant, or adjust allocations across existing tenants as needed.

When you reduce the license capacity:

You cannot reduce allocations below 200 users, the minimum required for service continuity.
You can only reduce licenses in multiples of 10.
When you reduce base license quantities, associated add-ons such as ADEM-AIOps, ZTNA Connector, or Remote Browser Isolation automatically adjust to maintain alignment.
The mobile users and remote networks quantity can be reduced to either minimum quantity or it can also be made zero by deselecting those options.
You cannot reduce the license capacity for Panorama Managed tenants.

All superusers, multitenant superusers, and business administrators of the TSG will receive notification when you reduce license capacity. If the reduction requires configuration changes (for example, adjusting bandwidth for sites), you must make these changes before committing the configuration. Until then, commits are blocked with a license quantity mismatch message.

SASE

Where Can I Use This?	What Do I Need?
`Strata Multitenant Cloud Manager` `Activation Console` `Prisma Access` `Prisma Browser` `Remote Browser Isolation` `CASB-X` `Data Security` `AI Access Security` `SaaS Security Posture Management` `Enterprise DLP`	Superuser or Multitenant Superuser role

On the Subscriptions page, locate the activated product you wish to manage.
Click ⋮Manage for the required product.
Select the target tenant.
Select a Region nearest to the storage location of the data logs.
Modify the license allocation as needed.

Note: If you are modifying the allocation for the default tenant, ensure that you reduce the assigned license quantity. The reduced quantity becomes available for reallocation to other tenants in the hierarchy.
Agree to the terms and conditions, and select Activate Now to activate the license on the selected tenant.
Validate the allocation by clicking View Details and hovering over the Tenants to view the license quantity for each tenant.
Repeat from the Step 3 to allocate licenses to additional tenants.

Validate the license allocation by switching to the corresponding tenant in the tenant browser and reviewing the allocation details.

Firewall and SD-WAN

This section contains instruction to modify license allocation in firewall products.

Where Can I Use This?	What Do I Need?
NGFW, including those funded by Software NGFW Credits Prisma Access SD-WAN	Superuser or Multitenant Superuser role

Use one of the various ways to access the Subscription.
Search the subscriptions table with your Tenant Service Group ID (tsg_id).

For the filtered TSG, you can verify the status of the assigned quantity compared to the total quantity. You also see the associated tenants where the subscription is currently allocated.
From Actions, select Activate Cloud Tenant.

You will be directed to the Activate Subscription page.
Select an existing tenant or create a new tenant.
Modify the license allocation and select Done.
Agree to the Terms and Conditions and Activate.
In both Subscription and Tenant Management, you can verify the change in license allocation.