Before you can add Centrify authentication and privilege elevation license keys, you must create a Licenses container object in Active Directory because you must have at least one Licenses container in the forest into which you install license keys. It is also possible to add more License containers to the forest and use those additional containers to control who can use which license keys. For example, you may want to create one license container for application servers and another for workstation licenses. You can then set permissions on the container objects to prevent the workstation administrators from installing the application server license keys and the application server administrators from installing the workstation license keys in their respective containers.
Note: You can also use Access Manager to assign a specific license container to an individual zone as described in Assigning a license container to a zone through Access Manager.