Maximo Mentor Series  ·  Moving to MAS 9, part 5b

AppPoints in practice: installs, custom apps and watching the pool

Martin Williams  ·  Oct 2, 2026  ·  Part 5b in Moving from Maximo 7.6 to MAS 9
AppPoints in practice: installs, custom apps, the AI service and watching the pool

Part 5a counted the people. But when a licence manager gets a surprise, it’s rarely a person. It’s an install nobody priced, a custom application nobody entitled, or an integration nobody counted.

A quick recap from part 5a: you buy one pool of AppPoints for the whole suite. Authorized users hold their points all the time, and concurrent users borrow them while they’re logged in, from 0 to 15 points a user depending on their tier. This part covers everything else that draws on the pool, and how to keep an eye on it.

AppPoints at a glance: one pool for the whole suite. Installs, authorized users and administrators hold points for good; concurrent users borrow and return them; Self-Service users and non-production installs are free
The same pool as part 5a. This part is about the installs on the left and the dashboard on the right.

1. Custom and cloned applications

Most 7.6 systems have a few applications of their own. MAS 9.2 treats the two kinds differently:

  • Cloned applications, copied from an IBM application in Application Designer (or duplicated in Maximo Application Framework configuration), inherit their licensing from the original automatically. Anyone given access needs at least the same level of access as they’d need in the original.
  • Custom applications, built from scratch or changed so much that they no longer match their source, don’t. You add their entitlement in Suite → Access and usage → Security groups → System actions → Cloned and custom applications: choose the application, the suite application it belongs to, its module, and the access each tier gets (no access, read-only, read and save, or full).
The Cloned applications tab in MAS 9.2: Service Provider cloned applications with their module, and the access each tier gets (Self-service no access, Limited read and save, Base or Premium full access) plus a Three module access flag
Cloned applications are listed with the access they inherit for each tier. Here, Service Provider’s cloned applications: no access for Self-Service, read and save for Limited, full access for Base or Premium.
The Cloned and custom application entitlement page in MAS 9.2, on the Custom applications tab, with the Add entitlement button and columns for suite application, module, application and each tier
The Custom applications tab starts empty: each custom application needs Add entitlement before anyone can be given access.

Until you do, a custom application won’t appear in security groups at all. The three-module rule applies to these applications too, and IBM’s guidance is blunt: custom or cloned applications mustn’t be used to get round licensing. See IBM’s steps for adding entitlement.

2. Installs, the AI service, and the users you might not count

Some components take points as soon as they’re deployed in production, and hold them for as long as that environment runs. They’re gone from the pool before anyone logs in.

Install AppPoints in MAS 9.2: Optimizer 220, Asset Investment Planning 200, Real Estate and Facilities reserve 200, 120 or 20, SAP, Oracle or Workday connectors 80 each, Optimizer Limited 60, Civil Infrastructure 50, Visual Inspection 45, Spatial 20, Visual Inspection Edge 1 per device, Envizi connector 0
Install AppPoints for production environments in MAS 9.2.

Non-production is free, with a catch. A development or test install costs nothing, as long as the same component is also installed in production. Administrators and developers who use those environments still need licences.

Maximo Optimizer is the biggest install on the list. In 7.6, schedule optimization was a separately bought add-on, Maximo Scheduler Optimization, so many teams never had it. In MAS it’s Maximo Optimizer, deployed from the suite catalog. Maximo Scheduler uses it to run optimization models against a scheduling scenario, so planners can compare what-ifs before committing:

  • Longer-term plans: resource leveling (no idle or over-booked crafts), capacity planning (how much work fits in the period, and whether you need more people) and maintenance scheduling (the critical path for complex jobs, within resource limits).
  • Short-term dispatch: labor and crew assignment by availability and skills, and spatial scheduling, which assigns work by location and builds efficient routes.

Full Optimizer takes 220 AppPoints. Optimizer Limited takes 60, but is restricted to 2 VPCs, a single optimization model and one job at a time. And Maximo Asset Investment Planning (200 points) needs Optimizer too. So before you install it, decide which models you’ll actually run.

The AI service is metered. MAS 9.2’s AI features, such as the Maximo AI assistant, problem code recommendations and similar work orders, run on the AI service. It’s charged by the content tokens those features use each month: 1 billion tokens a month costs 10 AppPoints. A limited-use watsonx.ai licence is included, and from 9.2 its AppPoints show on the licensing dashboards. IBM’s AI service page lists the features.

Users you might not count. Licences follow people, not screens:

  • Anyone who updates Maximo’s records through another system, such as a third-party mobile app, an email approval or a custom web page, needs a licence, where Maximo is the system of record for that data.
  • The reverse is free: data fed in from a system that owns it, such as HR, ERP or SCADA, and reports or data extracts that people only read.
  • The integration framework’s own admin user doesn’t need a licence, and neither do the Maximo Mobile template user or performance-test users (with enforcement off).

3. Watching the pool

MAS 9.2 has a new AppPoints Usage dashboard: Suite → Administration → AppPoints Usage. Administrators and user managers see it automatically; anyone else, such as a licence manager, needs the LICENSEUSAGE security group.

The MAS 9.2 AppPoints Usage dashboard for all instances: 54 AppPoints in use of 1,500 entitled, licence expiry date, peak usage against previous days, peak usage by instance each hour, and the peak broken down by user type
The AppPoints Usage dashboard on a test system: current use against entitled capacity, the peak over time, by instance and by user type. You can download the data as CSV.

On a customer-managed system it shows real-time and historical use, broken down by application and user type, and it’s also where you set the consumption controls:

  • Idle timeout. A concurrent user who closes the browser without logging out keeps their points until the session times out, typically after 30 minutes. At a shift change that can leave the next shift waiting. A shorter timeout returns points sooner.
  • Compliance enforcement on. When the pool runs dry, the next concurrent user can’t log in until someone logs out. You never exceed what you’ve paid for, but people get blocked, usually at the worst moment.
  • Compliance enforcement off. Everyone gets in, and the peak is recorded. Nobody is blocked, but the overage is there in the figures for the next conversation with IBM.
The License consumption configuration page in MAS 9.2: session idle timeout enabled at 30 minutes, and compliance enforcement switched on with the access denial message AIUCO0020I
The License consumption settings: the session idle timeout (here 30 minutes) and compliance enforcement, with the message users see when the pool is empty.

Two details from that page. The access denial message can be edited, so you can tell people who to call. And if several MAS instances share the same IBM Suite License Service, the enforcement setting applies to all of them.

A monthly check that takes ten minutes: look at the peak and when it happened, compare authorized users with the people who actually logged in, and look for users whose tier rose because of a security group change.

MAS as a service is billed differently

If IBM runs MAS for you, points are charged hourly and calculated after the event. A concurrent user is charged for every clock hour they’re active in: log in at 7:15 and out at 7:45, and you pay for 7:00 to 8:00. Authorized users are charged every hour, whether they log in or not. There’s no enforcement, so usage over your pool simply appears on the bill. One pool covers every instance in the subscription, test and development included. See IBM’s AppPoints for MAS as a Service.

4. Five ways to stop wasting points

  1. Make only the all-day users authorized. Put people who dip in on concurrent, and check the peak before you decide.
  2. Keep requesters on Self-Service. Raising and tracking requests costs nothing. Don’t let a stray security group lift them to Limited.
  3. Design Limited users’ groups around three modules. One extra module with edit rights makes them Base, at 50% more points authorized and double concurrent.
  4. Switch leavers off. As part 4 showed, account status can deactivate a user on a date or after days without use. An authorized leaver still holds their points.
  5. Look for licensed users you haven’t counted. Integrations, email approvals and third-party apps that update Maximo’s records all need licences.

If you remember one thing

The pool pays for more than people. Installs take their points before anyone logs in, custom applications need entitlement before anyone can use them, and integrations that update Maximo need licences. Check the peak on the AppPoints Usage dashboard every month, and the pool you buy is the pool you need.

Over to you

Do you run with compliance enforcement on or off? And what made you choose?

Join the discussion ↓

No need to name your organisation. Tell us what you’ve seen, not who you saw it at.

What’s next

Part 6 covers the move from Maximo Anywhere to Maximo Mobile: what replaced Anywhere, one technician’s first morning on a phone, working without a signal, and what to plan before cutover. You can see all the parts of the series, and what’s coming, on the series page.

Free readiness checklist and Excel scorecard The 34-check PDF, including the licensing and access checks behind this part, plus the scorecard spreadsheet Meadowbank used in part 3. One sign-up, both files. Get the checklist and scorecard →
Planning users and licences for MAS 9?

4max builds administrator and licence-manager training on your own configuration: security groups, tiers and the AppPoints Usage dashboard, with hands-on labs.

IBM partner? We also build and deliver behind the scenes, under your brand. How we work with partners →
About the author. Martin Williams spent 20 years as IBM’s lead Maximo instructor and curriculum architect, and is an authorised IBM Maximo instructor through IBM’s Global Training Providers. Through 4max he now builds Maximo training content and delivers courses for organisations and IBM partners, under their brand or his. About Martin →
General guidance only: check each point against your own licence, release and environment.
← All parts of Moving to MAS 9 Talk to us about MAS 9 administrator training →

Comments