Entraazure p1 to p2 license features

Moving from Microsoft Entra ID P1 to P2 adds advanced protection and governance capabilities on top of what is already available in P1.

Key additions when moving to Entra ID P2

1. Identity Protection and risk-based Conditional Access

• P2 adds Microsoft Entra ID Protection capabilities on top of standard Conditional Access in P1.
• Risk-based Conditional Access policies can evaluate sign-in and user risk in real time and automatically enforce controls such as MFA, blocking access, or requiring password reset.
• This improves security and reduces unnecessary MFA prompts by adapting to user behavior.
• P2 is required for full access to advanced risk reports such as detailed Risky Users, with richer insights and remediation options.

2. Advanced Identity Governance P2 includes a full identity governance stack (on top of P1):

• Privileged Identity Management (PIM)
  • Just-in-time elevation for privileged roles.
  • Approval workflows, time-bound access, and auditing for admin roles.
• Entitlement Management
  • Access packages and catalogs to manage who can request access to apps, groups, and resources.
  • Automated assignment and lifecycle of access based on policies.
• Access Reviews
  • Periodic reviews of group memberships, app access, and privileged roles.
  • Helps ensure users retain only the access they still need.
• Broader Identity Governance
  • End-to-end governance for identities and access, including lifecycle workflows in P2 and Entra ID Governance add-on scenarios.

3. Enhanced external collaboration and Verified ID (in P2-based suites)

• P2 is part of Microsoft Entra Suite, which can also include:
  • Microsoft Entra ID Governance (extended governance features)
  • Microsoft Entra ID Protection
  • Microsoft Entra Verified ID premium capabilities
• These help secure collaboration with external users and partners and support advanced verification scenarios.

4. Education-specific benefits (if applicable)

• In education, Entra ID P2 is typically bundled with Microsoft 365 Education A5.
• Key benefits in that context:
  • Stronger protection for student, faculty, and staff accounts using risk-based Conditional Access and behavioral analytics.
  • Automated and auditable access to sensitive systems (student records, research data, admin systems) via PIM, entitlement management, and access reviews.
  • Integration with School Data Sync for automated provisioning of accounts, classes, and Teams.

5. Licensing and add-ons

• P2 includes all P1 features (Conditional Access, MFA enhancements, dynamic groups, app proxy, etc.) plus the advanced capabilities above.
• Some advanced governance scenarios (for example, certain entitlement management or Verified ID-based workflows) may require the Microsoft Entra ID Governance add-on even when P2 is present.

For more detailed feature and licensing comparisons and conceptual overviews, see:

• Microsoft Entra licensing overview and comparison
• Microsoft Entra multifactor authentication licensing and Conditional Access guidance
• Microsoft Entra ID P2 overview for advanced identity protection and governance

References:

• Step 1: Microsoft Entra ID Plan 1
• Features and licenses for Microsoft Entra multifactor authentication
• Microsoft Entra licensing
• Step 1: Identity and access management
• Why can I no longer access Risky Users report when I have been using it for almost a year - Microsoft Q&A