Office 365 ATP Plan 1 and Plan 2 application

Айнур Хазиев 1 Reputation point
2020-08-04T12:59:17.783+00:00

Dear Support,

I have a question related ATP features availability and applicability relatively to which license/plan was assigned to a user.

Currently, we have Office 365 ATP (Plan 1) licenses that applied to our users(about 500 users) that gives SPAM/Phishing/etc... policy configuration ability.

Recently, we bought and assigned 50 licenses of Office 365 E5 licenses that includes Office 365 ATP plan 2 which gave us ability to configure features such as Auto response, Investigation, Threat simulation, etc.

Our question is:
Will Office 365 ATP plan 2 features(for example, Auto Response whose Alert policy configured to manage emails with recipients of our domain) be applied only for users that have Office 365 E5 license?

Thank you in advance.

P.S. Tag system below of questions is unclear and I did not find related tags to ATP or Office 365 license.

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,175 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,462 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Joyce Shen - MSFT 16,641 Reputation points
    2020-08-05T06:09:44.983+00:00

    Office 365 ATP Plan 2 is included in Office 365 E5, Office 365 A5, and Microsoft 365 E5

    Here is also an article introduces about the subscription about Office 365 Advanced Threat Protection Plan 2

    1 person found this answer helpful.
    0 comments
  2. Andy David - MVP 141.6K Reputation points MVP
    2020-08-04T13:22:51.54+00:00

    Technically, it will only be applied to those users that are licensed for it:

    Required licenses and permissions
    You must have Office 365 ATP to get Explorer or real-time detections.

    Explorer is included in Office 365 ATP Plan 2.
    The real-time detections report is included in Office 365 ATP Plan 1.
    Plan to assign licenses for all users who should be protected by Office 365 ATP. (Explorer or real-time detections shows detection data for licensed users.)

    https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide

    0 comments
  3. Rob Helm 1 Reputation point
    2020-08-04T16:35:56.433+00:00

    Microsoft has some guidance in the article linked below. But it does not address the P2 tier of Office 365 Advanced Threat Protection. In a software license compliance check (license audit), it will be very hard to prove that unlicensed users have not benefited from P2 features, which means you might have to buy them licenses when you were not expecting to.

    https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#office-365-advanced-threat-protection

    0 comments