One licence covering the premium features of five products: Private Access, Internet Access, ID Governance, ID Protection and Verified ID. Microsoft Entra ID P1 is a prerequisite, and Microsoft 365 E7 includes it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Microsoft Entra Suite in context, with comparison tables and the common traps.
Terms in this definition
- Licence
What entitles one particular user to the services a subscription offers. Each product licence is made up of several service plans (one per app or service), and before giving it to someone an admin has to record that user's usage location.
- Premium
Hosting plan for Azure Functions that keeps instances pre-warmed to avoid cold starts and supports VNet integration. Executions time out after 30 minutes by default, which host.json can extend.
- Document Intelligence add-on capabilities
Extra Document Intelligence options switched on with the features query parameter: barcodes, formulas, keyValuePairs, languages, ocrHighResolution, queryFields and styleFont.
- Microsoft Entra ID Governance
Set of features, and the licence for them, covering lifecycle workflows, entitlement management and access reviews.
- Microsoft Entra ID Protection
Uses risk scores on users and sign-ins to spot, look into and fix threats to identities. Policies that respond to that risk live in Conditional Access, and a Microsoft Entra ID P2 licence is required.
- Microsoft Entra Verified ID
A managed service for issuing and checking verifiable digital credentials, for example proof that someone works for an organisation. Entitlement management can ask for such a credential before an access request is made.
- Microsoft Entra ID P1
Premium tier of Microsoft Entra ID, bundled with Microsoft 365 Business Premium, that unlocks capabilities like Conditional Access.
- E7
The Frontier Suite: a Microsoft 365 tier, generally available from 1 May 2026, that builds on all of E5 by adding Agent 365, Microsoft Entra Suite and Microsoft 365 Copilot.
Related terms
- MFA registration policy
A Microsoft Entra ID Protection policy that asks targeted users to set up MFA the next time they sign in interactively, allowing 14 days before it is enforced. It requires P2 or Microsoft Entra Suite, and it does not demand MFA on every sign-in.