Or would you like to add another layer of protection via ‘Privilege Identity Management’?.Does MFA alone meet your needs as far as securing Administrator accounts is concerned?.

Or would you like the conditional access policies to be extended to block access for risky sign-ins too?.

Are your security requirements fulfilled with the general conditional access policies?.

Would you like to be notified about risks such as password spray attacks, atypical travel, Leaked Credentials, etc.?.

Do you wish to detect risky accounts in your tenant?.

Vulnerabilities and risky accounts detectionĪsk yourself these questions if you’re up for going with P2 over P1.

Using the scanner to apply classification, labeling and/or protection would require that all 50,000 internal users have an Azure Information Protection P2 licenses.Azure AD Premium P1 and Azure AD Premium P2 are the licenses that cater to organizations’ advanced identity protection requirements.ĪAD Premium Plan 2 has all the features of P1 however, it does add more security features, namely: In the example above, to use the Azure Information Protection scanner in “discover” mode would not require any additional licensing, as all users are licensed with at least Azure Information Protection P1. As is standard with Azure Information Protection licensing, additional licensing is not required for external users who are accessing protected files or for users who previously protected files but are no longer users in the tenant, such as users who have left your organization. Which license(s) are required?Īn Azure Information Protection license is required for all internal users who have created content that resides in scanned file repositories.

They want to leverage the Azure Information Protection scanner but have one repository for all users. How would licensing requirements work in this example scenario: A company has 50,000 users with 25,000 on Azure Information Protection P1 (and/or EMS E3) and 25,000 on Azure Information Protection P2 (and/or EMS E5) licenses. However, if you wanted to keep users in the same repository, using the AIP scanner in 'discover' mode would require just the P1 license, but using the AIP scanner to apply classification, labeling, or protection would require the P2 license. You can assign licenses per user so you can have mixed licenses. The full plan comparison is listed on the pricing page. Hi have highlighted the risks and benefits well.

Azure information protection p1 vs p2