This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 1%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Dear Support,
I have a question related ATP features availability and applicability relatively to which license/plan was assigned to a user.
Currently, we have Office 365 ATP (Plan 1) licenses that applied to our users(about 500 users) that gives SPAM/Phishing/etc... policy configuration ability.
Recently, we bought and assigned 50 licenses of Office 365 E5 licenses that includes Office 365 ATP plan 2 which gave us ability to configure features such as Auto response, Investigation, Threat simulation, etc.
Our question is:
Will Office 365 ATP plan 2 features(for example, Auto Response whose Alert policy configured to manage emails with recipients of our domain) be applied only for users that have Office 365 E5 license?
Thank you in advance.
P.S. Tag system below of questions is unclear and I did not find related tags to ATP or Office 365 license.
A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 67%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Any update, do suggestions below resolved your question?
Is there any further information so far?
Office 365 ATP Plan 2 is included in Office 365 E5, Office 365 A5, and Microsoft 365 E5
Here is also an article introduces about the subscription about Office 365 Advanced Threat Protection Plan 2
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 59%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Microsoft has some guidance in the article linked below. But it does not address the P2 tier of Office 365 Advanced Threat Protection. In a software license compliance check (license audit), it will be very hard to prove that unlicensed users have not benefited from P2 features, which means you might have to buy them licenses when you were not expecting to.
Technically, it will only be applied to those users that are licensed for it:
Required licenses and permissions
You must have Office 365 ATP to get Explorer or real-time detections.
Explorer is included in Office 365 ATP Plan 2.
The real-time detections report is included in Office 365 ATP Plan 1.
Plan to assign licenses for all users who should be protected by Office 365 ATP. (Explorer or real-time detections shows detection data for licensed users.)