> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6.x-faqs/cortex-xsoar-6-faqs/licensing.md).

# Licensing

FAQs about Cortex XSOAR 6x licensing, user types, and entitlements.

Licensing information for Cortex XSOAR 6x.

<details>

<summary>What are the different types of Cortex XSOAR licenses?</summary>

There are four main types of Cortex XSOAR licenses:

| License                                                        | Details                                                                                                                                                                                                        |
| -------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Cortex XSOAR Threat Intel Management (includes two full users) | Limited to customers migrating from Minemeld and does not require case management for security orchestration, automation, and response (SOAR).                                                                 |
| Cortex XSOAR Starter Edition (includes two full users)         | Relevant for customers who require case management for SOAR. Cortex XSOAR Starter Enterprise Platform - includes two users and support.                                                                        |
| Cortex XSOAR (Includes four full users)                        | Relevant for customers with case management for SOAR and threat intelligence needs. Cortex XSOAR is a full product that includes automation, orchestration, and threat intelligence management for Enterprise. |

Additional types of Cortex XSOAR licenses:

* Cortex XSOAR Enterprise Starter platform for MSSP
* Cortex XSOAR Threat Intelligence Management for MSSP with two users
* Cortex XSOAR full product that includes automation, orchestration, and threat intelligence management for MSSP - with four users
* Cortex XSOAR Starter Perpetual
* Cortex XSOAR Threat Intelligence Management Perpetual with two users
* Cortex XSOAR and Threat Intelligence Management (TIM) multi-tenant licenses
* Cortex XSOAR full product that includes automation, orchestration, and threat intelligence management for perpetual with four users

All Cortex XSOAR licenses come with an additional development license.

For more licensing details, see the [Cortex XSOAR Admin Guide](broken://spaces/OHlpKeFtqCLUYKuYyccd/pages/cXNuECcqWtloIHkp7utB).

</details>

<details>

<summary>How do I add a license?</summary>

See Add a License in the [Cortex XSOAR Admin Guide](broken://spaces/OHlpKeFtqCLUYKuYyccd/pages/cXNuECcqWtloIHkp7utB).

</details>

<details>

<summary>If I have a single server, how do I install a multi-tenant environment?</summary>

To install Cortex XSOAR as a multi-tenant, you need to install everything from scratch.

</details>

<details>

<summary>I am a non-MSSP customer. Can I change to multi-tenant architecture?</summary>

Yes, you can change your installation to a multi-tenant environment as long as you don’t onboard end-customers.

</details>

<details>

<summary>What happens if my license expires?</summary>

If your license expires, your Cortex XSOAR machine will roll back to Cortex XSOAR community edition, including all of its limitations. All automations will cease.

</details>

<details>

<summary>What is the difference between Audit users and Full users?</summary>

Audit users have read-only permission in Cortex XSOAR, meaning they do not have the ability to edit system components and data or run commands, automations, and playbooks. Audit users can view incidents, dashboards, and reports.

Full users have read-write permission in Cortex XSOAR, meaning they have the ability to view and edit system components and data. They can investigate incidents, run automation scripts and playbooks, and chat in the War Room. Full user access to Cortex XSOAR is determined by their assigned role.

</details>

<details>

<summary>What happens if I add more users than my entitlements?</summary>

A message pops up that you’ve exceeded the amount of users. If you would like to purchase more users, contact your account team.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6.x-faqs/cortex-xsoar-6-faqs/licensing.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.