Microsoft Entra ID P2
$9
per user / month (USD)
Add-on (included in M365 E5)
Security Add-ons
PIM + Identity Protection + risk-based access — advanced identity security
Browse all plans
P1 vs P2
| Feature | P1 (in E3) | P2 ($9 add-on) |
|---|---|---|
| Conditional Access | ✅ | ✅ |
| MFA, SSO | ✅ | ✅ |
| Self-service password reset | ✅ | ✅ |
| PIM (just-in-time admin) | ❌ | ✅ |
| Identity Protection (risk scoring) | ❌ | ✅ |
| Access reviews | ❌ | ✅ |
💡 PIM in plain English: Instead of having permanent Global Admins, PIM makes admins “request” elevated access for a limited time. If no one requests it, no one has it. This massively reduces your attack surface.
Frequently Asked Questions
1. Is Entra P2 included in E5?
Yes — M365 E5 includes Entra ID P2. This standalone $9 add-on is for E3 customers who need PIM and Identity Protection without upgrading to E5.
Disclaimer
Pricing is in USD (list price, per user, per month) sourced from official Microsoft pricing pages as of April 2026 — pricing, features, and availability are subject to change. Always check the official Microsoft pricing page for the latest information, and contact your Microsoft representative for local pricing, volume discounts, and tailored offers. The views expressed on this page are personal and do not represent official positions of Microsoft.
Detailed visual feature maps by M365 Maps (Aaron Dinnage) · Built by A Guide to Cloud & AI