Entra licensing

Feature Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] Provisioning API-driven provisioning ✅ ✅ ✅ ✅ [added: ✅] HR-driven provisioning ✅ ✅ ✅ ✅ [added: ✅] Account Discovery ✅ ✅ [added: ✅] Automated user provisioning to SaaS apps ✅ ✅ ✅ ✅ ✅ [added: ✅] Automated group provisioning to SaaS apps ✅ ✅ ✅ ✅ [added: ✅] Automated provisioning to on-premises apps ✅ ✅ ✅ ✅ [added: ✅] Cross-tenant synchronization for users (same cloud) ✅ ✅ ✅ ✅ [added: ✅] Cross-tenant synchronization for groups (same cloud) ✅ ✅ [added: ✅] Cross-cloud synchronization ✅ ✅ [added: ✅] Lifecycle Workflows (LCW) Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] Lifecycle Workflows ✅ ✅ [added: ✅] LCW + Custom Extensions (Logic Apps) ✅ ✅ [added: ✅] LCW + Agent Sponsorship tasks ✅ [added: ✅] Access reviews (AR) Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] AR - Capabilities previously generally available in Microsoft Entra ID P2 ✅ ✅ ✅ [added: ✅] AR - PIM For Groups (Preview) ✅ ✅ [added: ✅] AR - Reviews scoped to inactive users without active users in the review ✅ ✅ [added: ✅] AR - Reviews scoped to active and inactive users with review decision helpers for inactive users for the reviewer ✅ ✅ ✅ [added: ✅] AR - Machine learning assisted access certifications and reviews ✅ ✅ [added: ✅] AR - Catalog Access Reviews [removed: (Preview)] ✅ ✅ [added: ✅] AR - Custom data provided resource [removed: (Preview)] ✅ ✅ [added: ✅] Entitlement management (EM) Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] EM - Capabilities previously generally available in Microsoft Entra ID P2 ✅ ✅ ✅ [added: ✅] EM - Users assigned to access packages ✅ ✅ ✅ [added: ✅] EM - Agents and service principals assigned to access packages ✅ [added: ✅] EM - Users request access for themselves ✅ ✅ ✅ [added: ✅] EM - Admins directly assign a user assignments(including guests) ✅ ✅ ✅ [added: ✅] EM - Admins directly assign agents and service principals ✅ [added: ✅] EM - Admins directly assign any user - via email address for users not yet in your directory ✅ ✅ [added: ✅] EM - Managers requesting on behalf of employees ✅ ✅ [added: ✅] EM - Owners and sponsors request access on behalf of their agents or service principals ✅ [added: ✅] EM - Supported resources Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] EM - Groups and teams in access packages ✅ ✅ ✅ [added: ✅] EM - Eligible group ownerships and memberships in access packages (PIM for Groups) ✅ ✅ [added: ✅] EM - Applications in access packages ✅ ✅ ✅ [added: ✅] EM - SharePoint sites in access packages ✅ ✅ ✅ [added: ✅] EM - Microsoft Entra Roles (Preview) ✅ ✅ [added: ✅] EM - SAP Identity Access Governance (IAG) business roles (Preview) ✅ ✅ [added: ✅] EM - API permissions in access packages ✅ [added: ✅] EM - Approval options Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] EM - Multi-stage approvals with alternate approvers if no action is taken ✅ ✅ ✅ ✅ [added: ✅] EM - Specific approvers ✅ ✅ ✅ ✅ [added: ✅] EM - Managers as approvers ✅ ✅ ✅ [added: ✅] EM - Internal sponsors as approvers (from assignees' connected organizations) ✅ ✅ ✅ [added: ✅] EM - External sponsors as approvers (from assignees' connected organizations) ✅ ✅ ✅ [added: ✅] EM - Sponsors as approvers (from assignees' user profile) ✅ ✅ [added: ✅] EM - Agent Sponsors as approvers ✅ [added: ✅] EM - Externally determine approval requirements using custom extensions ✅ ✅ [added: ✅] EM - Collect additional requestor information for approval ✅ ✅ ✅ [added: ✅] EM - Lifecycle Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] EM - Expiration of access package assignments ✅ ✅ ✅ ✅ [added: ✅] EM - Manage the lifecycle of external users ✅ ✅ ✅ [added: ✅] EM - Mark guest as governed ✅ ✅ [added: ✅] EM - Additional capabilities Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] EM - Separation of duties ✅ ✅ ✅ [added: ✅] EM - Custom Extensions (Logic Apps) ✅ ✅ [added: ✅] EM - Auto Assignment Policies ✅ ✅ [added: ✅] EM - Verified ID integration ✅ ✅ [added: ✅] EM - Microsoft Entra ID Protection integration ✅ ✅ [added: ✅] EM - Microsoft Purview Insider Risk Management integration ✅ ✅ [added: ✅] EM - Conditional Access Scoping ✅ ✅ ✅ [added: ✅] My Access Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] My Access portal ✅ ✅ ✅ ✅ [added: ✅] EM - My Access Search ✅ ✅ ✅ ✅ [added: ✅] EM - Suggested access packages in My Access ✅ ✅ [added: ✅] EM - Configure whether requestors can see approver details in My Access (Preview) ✅ ✅ [added: ✅] EM - Delegate approvals in My Access (Preview) ✅ ✅ [added: ✅] Privileged Identity Management (PIM) Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] Privileged Identity Management (PIM) ✅ ✅ ✅ [added: ✅] PIM For Groups ✅ ✅ ✅ [added: ✅] PIM Conditional Access Controls ✅ ✅ ✅ [added: ✅] PIM - Custom extensions for role activation (Preview) ✅ ✅ [added: ✅] Other Free Microsoft Entra ID P1 Microsoft Entra ID P2 Microsoft Entra ID Governance Microsoft Entra Suite Microsoft Agent 365 [added: Microsoft 365 E7] Identity governance dashboard ✅ ✅ ✅ ✅ [added: ✅] Insights and reporting - Inactive guest accounts ✅ ✅ [added: ✅] Conditional Access - Terms of use attestation [added: ✅] ✅ ✅ ✅ ✅