Identity Exposure counts enabled users once across synced directories
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- Tenable One Identity Exposure Licensing: each licence covers one unique identity; enabled accounts for the same identity in Active Directory and Microsoft Entra ID count once (matched on MS-DS-Consistency-Guid), but overlapping identities in separate tenants are not deduplicated. Deleted enabled users are reclaimed in real time; removing a whole identity source is reflected within about 48 hours. Overage follows the 3/15/30-day stages, ending with loss of the Indicator of Exposure feature; on-premises version 3.77 or later enforces immediately. (vendor page undated; as published on 2026-09-27)
- Applies when
- Counting identities across AD and Entra ID.
- Applies to
- Tenable One Identity Exposure (cloud and on-premises).
- Related metrics