Hi @RizH,
The features are enabled at the tenant level but implemented per user. You need to have licenses assigned to any user who uses or benefits from the feature.
Here is what the documentation says about tenant-level services:
"A tenant-level service is an online service that when purchased for any user on the tenant (standalone or as part of Office/Microsoft 365 plans) is activated in part or in full for all users on the tenant. While in these cases some unlicensed users may be able to access the service technically, a license is required for any user that you intend to benefit from the service."
Risk-based conditional access and PIM are tenant-level services. https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance
Feel free to reach out to your licensing representative of choice though if you have further questions. It's free to talk to the Billing/Subscription team. https://azure.microsoft.com/en-us/support/create-ticket/
-
If the information helped you, please Accept the answer. This will help us and other community members as well.