Premium licence tier for Microsoft Entra ID that brings ID Protection, which Conditional Access needs for risk-based rules.
Read more: Microsoft Learn
In the Ultra Transcenders books
AZ-900SC-900AB-900SC-200SC-300MD-102ALZ
Each book explains Microsoft Entra ID P2 in context, with comparison tables and the common traps.
Terms in this definition
- Premium
Hosting plan for Azure Functions that keeps instances pre-warmed to avoid cold starts and supports VNet integration. Executions time out after 30 minutes by default, which host.json can extend.
- Licence
What entitles one particular user to the services a subscription offers. Each product licence is made up of several service plans (one per app or service), and before giving it to someone an admin has to record that user's usage location.
- Archive
Offline access tier for blobs, cheapest to store yet dearest to access. Reading a blob means rehydrating it first, which can take as long as 15 hours.
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.
- Microsoft Entra ID Protection
Uses risk scores on users and sign-ins to spot, look into and fix threats to identities. Policies that respond to that risk live in Conditional Access, and a Microsoft Entra ID P2 licence is required.
- Conditional Access
Policy engine in Microsoft Entra ID P1 that, depending on signals such as risk or named locations, allows access subject to controls like MFA or a compliant device, or blocks it.
Related terms
- My Access
Self-service website, at myaccess.microsoft.com, for browsing access packages and asking to be given one; approvers sign in there too, to accept or deny what has been asked for. Licensing is Microsoft Entra ID P2 or ID Governance.
- Privileged Identity Management
Capability in Microsoft Entra ID P2 that activates privileged roles just in time and for limited periods, with approval, justification and an audit trail.
- Sign-in risk
Microsoft Entra ID Protection's assessment of how likely it is that a given sign-in was not made by the person who owns the account. With Microsoft Entra ID P2 it can be used as a condition in Conditional Access.
- User risk
Microsoft Entra ID Protection's assessment of how likely it is that an account has been compromised, for instance because its credentials have leaked. With Microsoft Entra ID P2 it can be used as a condition in Conditional Access.