Azure Sentinel P1/P2 license - Microsoft Q&A (2024)

FAQs

Azure Sentinel P1/P2 license - Microsoft Q&A? ›

There's really no licensing for Azure Sentinel itself. Instead, make sure your licensing for the services that contain the data you want to connect to Azure Sentinel is licensed appropriately. For example, to export sign-in data from Azure AD, you need an Azure AD P1 or P2 license.

Azure AD Premium P2 – is an edition includes all of the features of Azure AD Premium P1 with the addition of Identity Protection and Privileged Identity Management (PIM). Identity Protection provided management of conditional access to apps and critical data.

Generally speaking, every user taking advantage of a feature enabled by Azure AD P2 will require the corresponding licenses. That said, Conditional access policies in particular require P1 only, which is already included in both SKUs you have purchased.

Yes, the requirement is that the Azure AD Premium P1 license is applied to all users who make use of the feature. Azure AD has always been licensed per user and this applies to all Azure AD features. A proper license is required if a user benefits directly or indirectly from any feature covered by that license.

To check which edition your Azure AD is capable of, log in to the Azure AD Portal and look in the overview section: Azure AD Free indicates you only have the basic features. Azure AD Premium P1 or P2 will indicate advanced features are available.

Microsoft Entra ID P2 (formerly Azure Active Directory P2) is available as a standalone or included with Microsoft 365 E5 for enterprise customers.

The choice between Azure AD Premium P1 and P2 depends on your organization's unique requirements and priorities. Azure AD Premium P1 offers essential identity and access management features, while Azure AD Premium P2 is best for organizations with advanced security, compliance, and governance needs.

Customers with Software Assurance can use License Mobility to bring licenses on premise. This can be done by: Obtaining a SQL Server, Bring Your Own License (BYOL) image from the Marketplace. Azure doesn't charge for images with SQL licensing.

Once you have received the license key, log in to the Azure portal. In the Azure portal, go to the Azure Active Directory service. Click on the "Licenses" tab and then click on "All products". Click on "Entra ID P2" and then click on "Assign".

Do you need P1 for Conditional Access? ›

You're required to have an Azure AD Premium P1, Azure AD Premium P2 license, or Microsoft 365 Business Premium license. The Conditional access policies are also included in the following licenses: Microsoft 365 E3 & E5.

Microsoft Entra ID P1 (formerly Azure Active Directory P1) is available as a standalone or included with Microsoft 365 E3 for enterprise customers and Microsoft 365 Business Premium for small to medium businesses. This product is not available in your market.

How about Microsoft Entra ID? Azure AD, now known as Microsoft Entra ID, has a free edition that provides user and group management, on-premises directory synchronization, basic reports, self-service password change for cloud users, and single sign-on across Azure, Microsoft 365, and many popular SaaS apps.

A Microsoft Intune license is created for you when you sign up for the Intune free trial. As part of this trial, you'll also have a trial Enterprise Mobility + Security (EMS) subscription. An Enterprise Mobility + Security (EMS) subscription includes both Microsoft Entra ID P1 or P2 and Microsoft Intune.

Microsoft 365 includes Azure AD Premium P1. You would need Microsoft 365 E5 or EMS E5 to get P2. EMS E3, Microsoft 365 E3, and Microsoft 365 Business Premium includes Azure AD Premium P1. EMS E5 or Microsoft 365 E5 includes Azure AD Premium P2.

Defender for Office 365 Plan 1 protects email and collaboration features from zero-day malware, phishing, and business email compromise (BEC). Defender for Office 365 Plan 2 adds phishing simulations, post-breach investigation, hunting, and response, and automation.

Microsoft 365 includes Azure AD Premium P1. You would need Microsoft 365 E5 or EMS E5 to get P2. EMS E3, Microsoft 365 E3, and Microsoft 365 Business Premium includes Azure AD Premium P1. EMS E5 or Microsoft 365 E5 includes Azure AD Premium P2.

Office 365 E3, while many people have it, is being rolled into Microsoft 365 E3, which has the Entra ID P1 license in it as well as the standard license.

Business Premium includes Azure AD Premium P1 and offers licenses for Intune and Windows 10 Business. Microsoft 365 E3 also includes Endpoint Management/Intune as well as Windows 10 Enterprise licenses for Win10 desktops.