Premium tier of Microsoft Entra ID, bundled with Microsoft 365 Business Premium, that unlocks capabilities like Conditional Access.
Read more: Microsoft Learn
In the Ultra Transcenders books
AZ-900SC-900AB-900SC-300MD-102ALZ
Each book explains Microsoft Entra ID P1 in context, with comparison tables and the common traps.
Terms in this definition
- Premium
Hosting plan for Azure Functions that keeps instances pre-warmed to avoid cold starts and supports VNet integration. Executions time out after 30 minutes by default, which host.json can extend.
- Archive
Offline access tier for blobs, cheapest to store yet dearest to access. Reading a blob means rehydrating it first, which can take as long as 15 hours.
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.
- Microsoft 365
Formerly Office 365, Microsoft's software-as-a-service productivity suite. A Microsoft Entra tenant provides its identity, and its data is not governed by Azure RBAC.
- LIKE
Compares strings with a pattern that can contain the % and _ wildcards. Because it only understands character patterns, searching big volumes of text this way is much slower than using full-text search.
- Conditional Access
Policy engine in Microsoft Entra ID P1 that, depending on signals such as risk or named locations, allows access subject to controls like MFA or a compliant device, or blocks it.
Related terms
- Additional local administrators
Microsoft Entra ID P1 device setting that grants selected users local administrator rights across all Microsoft Entra joined devices. Targeting only some devices is not possible.
- Automatic enrollment
With Microsoft Entra ID P1 or P2, Intune can enrol a Windows device as soon as a user in the MDM user scope joins or registers it with Entra ID, with no extra steps.
- Custom role
Built from the preset permissions that the built-in Microsoft Entra roles also use, and assignable to the whole tenant, an administrative unit or one object. Each user it is assigned to needs Microsoft Entra ID P1; Azure custom roles are a separate thing.
- Dynamic membership group
A group, either security or Microsoft 365, where a rule on user or device properties decides who belongs, adding and removing people automatically. You can't add anyone manually, and a Microsoft Entra ID P1 licence is needed for every distinct member.
- E3
An enterprise bundle from Microsoft. Since 1 July 2026, Defender for Office 365 Plan 1 has come with it, alongside Microsoft Entra ID P1 and the core of Microsoft Purview.
- Microsoft Entra Suite
One licence covering the premium features of five products: Private Access, Internet Access, ID Governance, ID Protection and Verified ID. Microsoft Entra ID P1 is a prerequisite, and Microsoft 365 E7 includes it.
- Password writeback
A Microsoft Entra ID P1 feature that copies new passwords set in the cloud, such as through self-service reset, down to the organisation's on-premises Active Directory.
- Terms of use
A PDF agreement enforced with Conditional Access, which people have to accept before getting to resources; Microsoft Entra ID P1 is needed. Putting a link in the branding footer doesn't enforce anything.