What it is
Conditional Access, group-based licensing, dynamic groups, self-service password reset with write-back to on-premises Active Directory, application proxy and the identity reporting that the free tier lacks.
Included in: Included in Microsoft 365 Business Premium, Microsoft 365 E3, E5 and F3. Entra ID P2 adds identity protection and privileged identity management.
Who needs it
- Users on Business Basic, Standard or the Office 365 suites, which carry only the free directory.
- Organisations that want multi-factor authentication enforced by policy rather than by hoping.
- Hybrid estates that need password write-back and group-based licence assignment.
Buying options, at Microsoft’s list price in EUR
Loading the price list…
List prices for the region chosen at the top of the page; the proposal you build here carries them. Annual-commitment lines are billed as shown; monthly lines can be reduced or cancelled at each renewal.
Asked before buying
P1 or P2?
P1 for Conditional Access and the everyday identity controls; P2 when there are many privileged accounts, a requirement for access reviews, or risk-based sign-in policies. Most small estates are right with P1.
Is Conditional Access really not in Business Standard?
Correct: Standard has security defaults, a fixed set of protections you cannot tune. Conditional Access needs P1, which is why Business Premium exists.