Last updated: October 23, 2026
By ZapAI Team
TL;DR: Licensing for Finance, the ERP app in Microsoft’s Dynamics 365 family, is decided by security roles, not job titles. Each user’s roles map to Team Members ($8), Operations Activity ($50), or a full license like Finance ($210), and the highest-priced app must be the base, with other apps attached for $20 to $30. Since January 15, 2026, Microsoft blocks unlicensed users in production at each customer’s first anniversary. Clean up roles before you buy seats.
Dynamics 365 Finance licensing assigns each user the license their security roles require. Full users need a $210 Finance base license, while approvers and occasional users can usually use $8 Team Members or $50 Activity licenses.
Here’s a pattern we keep seeing in finance and operations license reviews. A company buys 60 full Finance seats because 60 people log in. Half of them only approve expenses, read reports, or enter time. Nobody checked, because until 2026 Microsoft didn’t check either. Why would you?
Not anymore. Microsoft now compares every production user’s assigned license with what their security roles require, and it blocks sign-in when they don’t match. Sometimes in both directions, since the same report that flags under-licensed users also flags over-licensed ones.
This guide covers the licensing rules for Dynamics 365 Finance in 2026, the price of every license type, which roles need which license, the enforcement timeline, and how to audit your own tenant. Prices and rules come from Microsoft’s October 2026 Licensing Guide and Licensing Deck, checked October 23, 2026. If you’re still deciding between Finance and Business Central, start with our Business Central vs Dynamics 365 Finance comparison instead.
How Does Dynamics 365 Finance Licensing Work?
Every user gets the license their security roles demand. Microsoft classifies over 10,000 securable objects, like menu items and actions, and the highest classification a user can reach sets their license. Full users then get one base license and optional attach licenses for other apps.
That first sentence is the whole game. Job titles don’t matter. Login counts don’t matter. Per Appendix F of Microsoft’s Dynamics 365 Licensing Guide, the required license is determined by the highest classification of any securable object the user can access. One privilege, one menu item, one checkbox in a custom role, and an $8 user becomes a $210 user.
Base and attach sits on top of that. When a full user needs more than one Dynamics 365 app, the first license has to be the highest-priced one. That’s the base. Everything else attaches at a discount. Microsoft’s Guide says base and attach licenses are identical in capability and differ only in price. Attach licenses don’t add storage. And an admin can’t assign an attach license to someone without the right base.
What Does Each Dynamics 365 Finance License Cost in 2026?
Finance costs $210 per user per month and Finance Premium $300, both billed annually. Team Members is $8, Operations Activity $50, and Operations Device $85 per device. Attach licenses on a Finance base cost $20 to $30.
Prices below are US list, billed annually, from the Finance pricing page and the October 2026 Licensing Deck. Your agreement may differ.
| License | Price per month | Type | Minimum purchase |
|---|---|---|---|
| Finance | $210 per user | Full, base | 20 seats |
| Finance Premium | $300 per user | Full, base | 10 seats |
| Supply Chain Management, Commerce, Human Resources, or Project Operations on a Finance base | $30 per user | Attach | None listed |
| Sales, Customer Service, or Field Service on a Finance base | $20 per user | Attach | None listed |
| Operations Activity | $50 per user | Limited | None listed |
| Team Members | $8 per user | Limited | None listed |
| Operations Device | $85 per device | Shared device | None listed |
| Human Resources Self Service | $4 per user | Limited | None listed |
Old quotes still say $180 for Finance. That was the price before October 1, 2024, when Microsoft raised it to $210, a change The Register covered at the time. If a renewal proposal or an online calculator shows $180, it’s two years stale.
Step-ups exist too. Moving a user from Team Members to Activity costs $42 more a month, and Finance to Finance Premium costs $90 more. The Deck notes step-ups aren’t available through CSP.
Plain Finance doesn’t include Copilot Credits. Finance Premium includes 1,000 per user per month, pooled at the tenant, for Dynamics 365 agents and custom agents that connect to Dynamics 365 MCP servers. If agents are on your roadmap, our Dataverse MCP server guide explains how those connections work.
Team Members vs Operations Activity vs a Full License?
Team Members covers people working on their own records, like time, expenses, requisitions, and simple approvals. Activity adds operational work on orders, receiving, shipping, and vendors, plus more approvals. Anyone posting journals or running finance processes needs a full license.
Microsoft’s Guide spells out Team Members rights carefully. Users can record time and expenses, approve time, expenses, and vendor invoices, create requisitions, edit quality control and departmental budget items, and manage their own employee information. The catch sits in one phrase. Those rights are for the user’s own use, not for activities on behalf of others. An assistant entering expenses for three executives isn’t a Team Members user.
Activity sits between the two. At $50 it adds everything in Team Members plus creating or editing items related to warehousing, receiving, shipping, orders, vendor maintenance, and budgets, and running point-of-sale, warehouse, or shop-floor devices.
Which approvals need which license?
Approvals cause more licensing arguments than anything else. Appendix G of the Licensing Guide lists them, and the split isn’t intuitive.
| Approval | Lowest license |
|---|---|
| Expense reports, timesheets, vendor invoices | Team Members |
| Purchase agreements and budget register entries through workflow | Operations Activity |
| Maintaining purchase orders, vendor catalogs, commitment documents | Operations Activity |
| Ledger journals, vendor disbursement journals, customer payment journals | Full (Finance) |
| Fixed asset journals, free-text invoices, bank reconciliation | Full (Finance) |
| Vendor invoice matching approval, credit limit adjustments | Full (Finance) |
So a department head who approves vendor invoices can stay on Team Members. The treasurer approving vendor payment journals can’t. Same word, approve. Two licenses $202 apart.
Financial reporting has its own rule. Financial report designers need a Finance license, while report viewers need Team Members. Budget planners creating plans or forecasts in business performance planning need Finance Premium, and read-only planning users can stay on Finance.
Which License Does Each Role Need? A Worksheet
Use the persona table below as a starting point. It shows the cheapest license that usually fits and the one privilege that most commonly pushes the role higher. Your tenant’s role design decides the final answer.
| Persona | Usually fits | What pushes it higher |
|---|---|---|
| Expense or timesheet submitter | Team Members | Entering expenses for someone else |
| Department head approving vendor invoices | Team Members | A role that also lets them edit the invoice |
| Executive reading financial reports | Team Members | Designer access in financial reporting |
| Purchasing approver | Operations Activity | Vendor invoice matching approval |
| Receiving or shipping lead | Operations Activity | Posting inventory journals |
| Shared warehouse scanner or kiosk | Operations Device | Named users signing in on desktop |
| AP or AR clerk | Finance | Nothing, already full |
| Staff accountant or controller | Finance | Budget creation in business performance planning |
| FP&A analyst building budgets and forecasts | Finance Premium | Nothing, already full |
| Cost accountant working in production | Finance base plus Supply Chain Management attach | Nothing, already full |
| Integration or batch service account | No license, if it holds only excluded roles | Any role outside Microsoft’s excluded list |
| External auditor with read access | Team Members | Any write privilege, even one |
Money leaks in that last column. Microsoft’s security object licenses documentation says granting Update, or any permission beyond Read, raises the access level to Write, and a Write grant where only Read was needed can raise a license from Team Members to full. Custom roles built by copying a standard role and adding one thing are the usual culprit. We see it in almost every tenant that’s been live more than two years, usually because a consultant long gone added a posting privilege to fix one urgent month-end problem and nobody ever took it back out.
What Does a Right-Sized License Mix Look Like?
For a hypothetical 60-user company, a role-based mix costs about $64,560 a year at list price, against $151,200 for 60 full Finance seats. That’s roughly 57% less, with every user licensed for what their roles actually do.
The numbers below are illustrative, built from Microsoft’s list prices, not from a client invoice.
- 18 accountants, AP and AR clerks, and controllers on Finance at $210, or $3,780 a month.
- 4 cost accountants on a Finance base plus a Supply Chain Management attach at $240, which is $960.
- 8 purchasing approvers and receiving leads on Activity. $400.
- 30 expense submitters, invoice approvers, and report readers on Team Members at $8, only $240 a month.
Total, $5,380 a month or $64,560 a year. Licensing all 60 as full Finance users would cost $12,600 a month, or $151,200 a year.
Check the minimums. The 22 Finance base licenses clear the 20-seat minimum for Finance. Add FP&A analysts who build budgets in business performance planning and you’d need Finance Premium, which carries its own 10-seat minimum per the Deck. Whether Premium seats count toward the Finance minimum isn’t stated clearly in the Deck, so confirm it in the Product Terms or with your licensing partner before you design around it.
Is a 57% saving realistic? Only if roles are clean. Tenants with years of copied custom roles usually start somewhere in between, and the first audit pays for itself by finding the handful of users who are full licenses only because of one stray privilege. Budgeting a whole implementation? Our Dynamics 365 implementation cost guide covers services and the rest of the bill.
When Does Microsoft Enforce Finance License Validation?
Staged validation started January 15, 2026. It applies at each customer’s first contract anniversary after that date. Admins get banners and emails 30 days before, then 15 days after the anniversary to assign licenses before unlicensed users are blocked.
Older articles disagree because the timeline took a few turns. Microsoft started license reporting in May 2025 and originally planned a hard requirement from November 1, 2025. In September 2025 it switched to a staged approach, announced on the Dynamics 365 blog. The current rules come from Microsoft’s license validation FAQ, last updated March 3, 2026.
- 90 days before your anniversary, preparation starts. Microsoft’s guidance is to review reports and fix roles.
- At 30 days, users and admins see in-product banners and admins get emails.
- 15 days after the anniversary, validation runs. Users without an assigned license can’t sign in and see a message saying they need a license to access the app.
- Multiple agreements in one tenant? The earliest anniversary sets the date.
Three corrections to claims we’ve seen elsewhere. Validation covers the Microsoft-managed production environment in the commercial cloud only. Sandboxes are reported but not validated, and government clouds are out of scope for now. Microsoft’s FAQ describes checking the assigned license against role requirements, not tracking what users actually clicked. And available licenses in the tenant don’t count. Each one has to be assigned to a named user in the Microsoft 365 admin center.
Who’s exempt? System administrators, Power Platform administrators, and Dynamics 365 administrators don’t need a license to configure and administer. Service accounts holding only the 51 roles listed in the FAQ are excluded, as are external vendor portal roles. B2B guest users aren’t exempt.
How Do You Audit Your Finance Licenses?
Use two reports. The license consumption report in the Power Platform admin center shows unlicensed, under-licensed, and over-licensed users. The License usage summary inside Finance shows which roles drive each requirement. Fix roles first, then assign licenses.
Here’s the order we run it in.
- Run the User activity aging report in Finance and disable accounts with no sign-in for 90 or 120 days. Microsoft’s preparation guide lists this as step one, and it’s free money.
- Open the Power Platform admin center license consumption report for finance and operations apps and export the detailed file. Per Microsoft’s license consumption documentation, it refreshes every 4 to 12 hours.
- In Finance, go to System administration, Security, Security Governance, then License usage summary. You need version 10.0.43 or later and two feature flags. The License usage summary page explains the user, role, duty, and privilege tabs.
- For every user flagged as full who shouldn’t be, trace the role to the privilege that escalates it. The preview security object licenses view shows Write grants that should be Read.
- Fix the roles. Then assign base licenses before attach licenses in the Microsoft 365 admin center, at least 24 hours before anything goes live.
- Recheck the report after the refresh window. Microsoft suggests a small 3% to 10% buffer of spare licenses for new hires and role changes.
Expect surprises. Plenty. A common one is a warehouse role showing as needing Finance because someone added a single journal privilege in 2023. Another is integration accounts holding a standard role that isn’t on Microsoft’s excluded list. Both cost $210 a month per account until someone notices.
What Else Shows Up on a Finance Licensing Bill?
Extra sandboxes, storage, and development tools. Finance includes one production and one Tier 2 sandbox. More sandboxes cost $1,350 to $12,000 a month each, and Visual Studio licenses for developers are separate.
Per the Licensing Deck, extra Tier 2 sandboxes cost $1,350 a month, Tier 3 $4,050, Tier 4 $7,900, and Tier 5 $12,000, each per tenant. Projects that want a dedicated performance-testing environment for go-live feel this one fast. Ouch.
Storage grows with users. A Finance tenant starts with 90 GB of Operations database capacity, or 125 GB with Finance Premium, and each Finance license adds 5 GB of database and 5 GB of file capacity, 10 GB with Premium. Attach licenses add nothing. Extra capacity is sold in 1 GB increments.
Integrations can need their own license. Operations Order Lines costs $500 per tenant per month for up to 100,000 order lines a month created through indirect access, like an e-commerce platform pushing orders in. Worth asking about before an integration design is final, not after.
Who Should Revisit Their Finance Licensing Now?
Anyone with an anniversary in the next 90 days, anyone who bought seats by headcount, and anyone with custom security roles older than two years. Companies that licensed carefully at go-live and haven’t changed roles can wait for the banners.
Bias disclosed. We sell implementation and support, not licenses, and a clean audit sometimes ends with a client buying fewer seats through someone else. Fine by us. A finance team that trusts its license count is easier to work with than one bracing for a block screen on the first of the month.
If the audit turns up a role design nobody understands, that’s a bigger conversation. It’s also one of the signs we listed in our guide on when to switch Dynamics 365 partners.
Wrapping Up
Dynamics 365 Finance licensing in 2026 comes down to three things. Roles decide the license. The most expensive app is the base. And since January 2026, Microsoft checks. Audit roles before your anniversary, assign licenses to named users, and stop paying $210 for people who only approve expenses.
ZapAI is a Microsoft Dynamics 365, Power Platform, Fabric, and AI consulting firm based in Irving, Texas, working with US companies on finance and operations apps. Our Dynamics 365 Finance consultants can run a license and security role review before your anniversary date, map every user to the cheapest compliant license, and fix the roles that are pushing costs up.
Questions Finance Teams Ask About Licensing
Do approvers need a full Dynamics 365 Finance license?
Depends what they approve. Expense, timesheet, and vendor invoice approvals fit Team Members at $8. Purchase agreements and budget register workflows need Operations Activity at $50. Ledger, payment, and fixed asset journal approvals need a full Finance license.
What’s the minimum number of Finance licenses?
Twenty seats for Finance and ten for Finance Premium, according to Microsoft’s October 2026 Licensing Deck. Confirm how mixed Finance and Premium purchases count against those minimums in your Product Terms.
Do sandbox environments need licensed users?
Not for validation. Microsoft only validates the managed production environment in the commercial cloud, and sandboxes appear in reports only. Users still need a license to use the product in general, so don’t treat a sandbox as a way around it.
What happens to a user without a license after validation starts?
They’re blocked at sign-in to production with a message saying they need a license. Assign the license in the Microsoft 365 admin center, and give it up to an hour to propagate. Microsoft recommends doing it a day ahead.
Is an attach license any less capable than a base license?
No. Microsoft says base and attach licenses are identical in capability and differ only in price. The difference is storage, since attach licenses don’t add database or file capacity to the tenant.
Why does our read-only role need a full license?
Almost always a hidden write privilege. Granting Update or anything beyond Read on a single securable object raises the role’s access level to Write, which can lift it from Team Members to a full license. Check the security object licenses view to find it.
Does Dynamics 365 Finance include Copilot?
Finance Premium includes 1,000 Copilot Credits per user per month. Standard Finance includes none, so agent usage is bought separately.