Attack Simulation Training

Question

I'm an admin for a small business and I want to run an Office 365 attack simulation training phishing test.

I want to test all the users. Is it enough to provide the Microsoft 365 E5 or Microsoft Defender for Office 365 Plan 2 just for mine account? Or do all the users which I'm gonna test need either one of the mentioned license?

Answer 1

Hi Michael Simandl, thanks for posting!

Attack Simulation Training requires Microsoft 365 E5 or Microsoft Defender for Office 365 Plan 2 licenses. First, these licenses are needed for every user you plan to include in the simulation not just the admin account. The feature checks licensing for each targeted user.

Second, if you want to run phishing tests for all users, each user must have either an E5 license or Defender for Office 365 Plan 2. This ensures they can receive simulations and complete the associated training.

Last, if licensing for all users isn’t possible, you can limit simulations to licensed accounts or consider Microsoft 365 Business Premium with security add-ons for smaller organizations.

If this helps, feel free to mark the answer as accepted so others can find it too.

Best,

Carl