Skip to content

Entra ID P2

The premium Entra licensing tier, adding Identity Protection, Privileged Identity Management, and access reviews.

P1 covers conditional access and the core policy engine. P2 adds risk-based capabilities: automatic detection of suspicious sign-ins, just-in-time elevation for administrative roles, and scheduled reviews of who holds what.

It is included in Microsoft 365 E5 and available in the Defender Suite add-on, which is usually the cheaper route if you also want the rest of the Defender stack.

Where this comes up

Entra ID P2 sits inside our identity and access work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.

Microsoft 365 licensing calculator Ask an engineer

Related terms

Microsoft Entra ID Microsoft's cloud identity service, the account directory behind Microsoft 365 and thousands of connected applications. Privileged Identity Management Making administrative roles available on request and for a limited time, rather than assigned permanently. Identity Protection Microsoft's risk engine for Entra ID, scoring sign-ins and users as risky based on behavior and known threat signals. Access review A periodic check that everyone who holds access to something still needs it.

More in identity and access

Active DirectoryBreak-glass accountConditional accessConsent phishingDevice complianceDomain controllerFIDO2Guest account

Back to the full glossary →

Want this explained against your own setup?

Definitions only get you so far. Book a short call and we will tell you whether this actually matters for your business, and what we would do about it.

Call (855) 737-9500 / (480) 573-3349

Email [email protected]

15-minute response on critical issues, 24/7. Onboarding in two to three weeks.

We reply within one business day. No spam, no pressure.