VANGELDER SOLUTIONS MCP Guard · Help NederlandsFrançais Product

docs.vangeldersolutions.be/mcp-guard/assign-licences

Assign Licences

MCP Guard for Microsoft Dynamics 365 Business Central is licensed per user. You buy the licences through Microsoft Marketplace and assign them to users in the Microsoft 365 admin center. In a production environment, every user of MCP Guard needs a licence, and so does every administrator who manages the rules.

Who needs a licence

  • Every user of an AI assistant in a production environment. Without a licence, the MCP Guard extension does not return the user's rule, and the BC MCP Pro connector does not connect to that environment.
  • Every administrator who adds, changes or deletes rules on the MCP Guard User Settings page.
  • Every user of the production, planning, assembly and project API pages, in a sandbox environment too.

One licence covers both permission sets of MCP Guard. A licence does not replace the permission sets: the user still needs MCP GUARD - USER, and an administrator MCP GUARD - ADMIN. See Permission Sets.

Assign a licence

  1. Buy the licences for MCP Guard through Microsoft Marketplace.
  2. Sign in to the Microsoft 365 admin center with an account that may assign licences.
  3. Go to Billing > Licenses.
  4. Select the licence for MCP Guard, and then assign it to the users.

What happens next

A user with a licence and the permission set MCP GUARD - USER can read their rule through the MCP client. An administrator with a licence and the permission set MCP GUARD - ADMIN can manage the rules. The connector checks the licence each time it reads the rule, so a licence that is removed is noticed at a following start.

Try MCP Guard in a sandbox without a licence

A user without a licence can try MCP Guard in a sandbox environment, on two conditions:

  • An administrator with an MCP Guard licence has made a rule that applies to the user: a line for the user, or a line for a security group the user is a member of.
  • The user has the permission set MCP GUARD - USER.

The user can then read their own rule and their effective permissions in the sandbox, and use the My MCP Guard page there. The connector can also report the user's usage in that sandbox. This does not apply to a production environment, and it does not include the production, planning, assembly and project API pages.

Messages about licences

A user without a licence in a production environment gets this message:

No MCP Guard licence is assigned to you. In a production environment every user of MCP Guard needs one.

A user without a licence in a sandbox environment where no rule applies to them gets this message:

No MCP Guard rule applies to you in this sandbox environment. Ask an administrator with a MCP Guard licence to add a rule for you.

A user without a licence who tries to add, change or delete a rule gets this message:

Managing MCP Guard settings requires a MCP Guard licence. Ask your administrator to assign you one in the Microsoft 365 admin center.

For the cause and the solution of each message, see Troubleshoot Rules and Licences.