Licensing considerations
Azure AD licensing can become a bit complex when it comes to security features. This is why we decided to compare different licenses and to explain which license you need for which feature. Azure AD is always licensed on a per-user basis, so you need one license for each user. For all security features that have been discussed in this chapter, you will either need an Azure AD Premium P1 or an Azure AD Premium P2 license. These licenses are also part of Microsoft 365 E3 and E5 license packages.
For the following features, you will need an Azure AD Premium P2 (or Microsoft 365 E5 license):
- Azure AD PIM
- Azure AD Identity Protection
- Risk-based Conditional Access policies
For the following features, an Azure AD Premium P1 (or Microsoft 365 E3) license is sufficient:
- Conditional Access based on group, location, and device status
- Self-service password reset
Please be aware that these licensing models might be subject to...