Microsoft Defender for Identity licensing requirement and usage

Question

Hi Folks,

After reading this https://learn.microsoft.com/en-us/defender-for-identity/deploy/prerequisites#licensing-requirements

Can someone please clarify if I just need to have the below license applied and confirmed to fully use the features in the Microsoft Defender for Identity?

IdP license tenant wide: Entra ID Premium P2

User license: M365 F3, M365 E3 and Office 365 E1 & E3

From: https://security.microsoft.com/

All of the agents have been installed on my domain controllers globally.

Let me know if I may have missed anything from the above.

Answer 1

Hi EnterpriseArchitect •,

If you have the M365 F3 user license, you still need to add the Microsoft 365 F5 Security & Compliance license as an add-on. https://www.microsoft.com/en-us/licensing/news/new_f5_security_and_compliance_offer_for_frontline_workers

Otherwise you can use one of the other licenses from the list:

• Enterprise Mobility + Security E5 (EMS E5/A5)
• Microsoft 365 E5 (Microsoft E5/A5/G5)
• Microsoft 365 E5/A5/G5/F5* Security
• Microsoft 365 F5 Security + Compliance*
• A standalone Defender for Identity license

Licenses are assigned per-user to benefit from all of the features.

That said, I would recommend reaching out to your licensing representative to understand more about the feature offerings per license. You can contact Sales here: https://info.microsoft.com/ww-landing-security-generic-contact-me.html?culture=en-us&country=us

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.