How to Remove Directly Assigned Office 365 E3 Licenses After Group-Based E5 Assignment?
Short answer
C Use Set-MgUserLicense with -RemoveLicenses to strip the directly assigned Office 365 E3 licenses from every user in one automated pass.
Question
Key Takeaways
The question tests whether you know that only Set-MgUserLicense can remove a license SKU from a user — the trap is assuming that assigning E5 via a group, or updating the group or user object, automatically clears the leftover direct E3 assignment.
This SC-300 scenario asks how to strip individually assigned Office 365 E3 licenses from 2,500 users after E5 was granted through group-based licensing, using the least administrative effort. It establishes that Set-MgUserLicense (C) is the cmdlet that removes per-user license SKUs, because a group assignment never deletes a license a user already holds directly.
Common mistake: Picking Update-MgUser (D) because it sounds like 'updating the user's licenses'; Update-MgUser edits profile attributes such as department or usage location and is not the cmdlet used to remove license SKU assignments.
Expert Analysis
Why the Answer Is Correct
Set-MgUserLicense is the Microsoft Graph PowerShell cmdlet that wraps the Graph assignLicense action for a user, and its -RemoveLicenses parameter accepts the SKU IDs to take away — exactly what is needed to drop the directly assigned Office 365 E3 license. Group-based licensing is additive: joining the E5 group grants E5 but leaves the existing direct E3 assignment untouched, so the direct assignment must be removed separately. Because the cmdlet targets one user at a time, you enumerate the 2,500 users (for example Get-MgUser -All) and pipeline them into Set-MgUserLicense -RemoveLicenses <E3 skuId> -AddLicenses @, which is a single automated pass rather than thousands of portal clicks. That scripted, single-command approach is why it satisfies "least amount of administrative effort" among the listed options.
Why the Other Options Are Wrong
Option A, Set-WindowsProductKey, is a Windows activation cmdlet that sets a product key on an operating system; it has no relationship to Microsoft 365 service-plan licensing. Option B, Update-MgGroup, modifies group properties, membership, or the licenses assigned to the group — but the group already carries the E5 assignment, and changing or re-updating that group cannot reach the E3 licenses that sit on each user object individually. Option D, Update-MgUser, changes user profile properties and is not the supported path for removing license SKUs, so it would leave the E3 assignments in place. Only Set-MgUserLicense exposes the -RemoveLicenses parameter that deletes a specific SKU from a user.
Community Comment Notes
Every learner in the thread landed on the same option, with dzdz explaining that "this cmdlet allows you to modify the licenses assigned to a user" and that it can remove the E3 licenses from users "who are now part of a group with Office 365 Enterprise E5 licenses." Trader6 reinforced this by pasting the official Microsoft Learn page for the cmdlet, and klayytech simply recorded C. There is no dissent in the comment set, and the vote tally is unanimous, so the community position and the vendor documentation agree with the verdict on this page.
Official Reference
- https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users.actions/set-mguserlicense?view=graph-powershell-1.0
- https://learn.microsoft.com/en-us/entra/identity/users/licensing-groups-assign
These links open the official vendor documentation in a new tab.
Exam Strategy
When a scenario says "least administrative effort" about license changes, hunt for the cmdlet that manipulates license SKUs directly rather than one that edits a group or user profile. Also remember the licensing doctrine Microsoft repeats in its docs: group-based licensing adds licenses but never removes a license a user already has through a direct assignment.
Frequently Asked Questions
Why doesn't assigning E5 through the group automatically remove the E3 licenses?
Can Update-MgUser remove the Office 365 E3 license instead?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
dzdz 👍 5 Answered CC. the Set-MgUserLicense cmdlet To remove the Office 365 Enterprise E3 licenses from the users who are now part of a group with Office 365 Enterprise E5 licenses assigned, you should use the Set-MgUserLicense cmdlet. This cmdlet allows you to modify the licenses assigned to a user. By using this cmdlet, you can remove the Office 365 Enterprise E3 licenses from all users who are part of the group where you assigned the Office 365 Enterprise E5 licenses.
-
Trader6 👍 3 Answered Chttps://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users.actions/set-mguserlicense?view=graph-powershell-1.0
-
klayytech 👍 3 Answered CC. the Set-MgUserLicense cmdlet
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SC-300 Questions
Access 80 questions with complete answers and detailed explanations.
View Full SC-300 Practice Test →