Insider Risk Management

Detect and act on risky user activity (data theft before resignation, policy violations, security-control evasion) using signals across Microsoft 365, correlated into investigable alerts.

Compliance

Also searchable as: IRM, insider threat

https://webchecks.io/365-license-lookup/feature/insider-risk-management

Licenses that include this

Enterprise

License	String ID
Microsoft 365 E5	SPE_E5
Microsoft 365 E5 (500 seats min)_HUB	Microsoft_365_E5
Microsoft 365 E5 (no Teams)	Microsoft_365_E5_(no_Teams)
Microsoft 365 E5 Compliance	INFORMATION_PROTECTION_COMPLIANCE
Microsoft 365 E5 Developer (without Windows and Audio Conferencing)	DEVELOPERPACK_E5
Microsoft 365 E5 EEA (no Teams)	O365_w/o_Teams_Bundle_M5
Microsoft 365 E5 EEA (no Teams) (500 seats min)_HUB	O365_w/o_Teams_Bundle_M5_(500_seats_min)_HUB
Microsoft 365 E5 EEA (no Teams) with Calling Minutes	Microsoft_365_E5_EEA_(no_Teams)_with_Calling_Minutes
Microsoft 365 E5 EEA (no Teams) without Audio Conferencing	Microsoft_365_E5_EEA_(no_Teams)_without_Audio_Conferencing
Microsoft 365 E5 EEA (no Teams) without Audio Conferencing (500 seats min)_HUB	Microsoft_365_E5_EEA_(no_Teams)_without_Audio_Conferencing_(500_seats_min)_HUB
Microsoft 365 E5 Suite features	M365_E5_SUITE_COMPONENTS
Microsoft 365 E5 with Calling Minutes	SPE_E5_CALLINGMINUTES
Microsoft 365 E5 without Audio Conferencing	SPE_E5_NOPSTNCONF
Microsoft 365 E5 without Audio Conferencing (500 seats min)_HUB	Microsoft_365_E5_without_Audio_Conferencing
Microsoft 365 E7	MICROSOFT_365_E7

Frontline

License	String ID
Microsoft 365 F5 Compliance Add-on	SPE_F5_COMP
Microsoft 365 F5 Compliance Add-on GCC	SPE_F5_COMP_GCC
Microsoft 365 F5 Security + Compliance Add-on	SPE_F5_SECCOMP

Standalone & add-ons

License	String ID
Microsoft 365 A5 for faculty	M365EDU_A5_FACULTY
Microsoft 365 A5 for Students	M365EDU_A5_STUDENT
Microsoft 365 A5 Suite features for faculty	M365_A5_SUITE_COMPONENTS_FACULTY
Microsoft 365 GCC G5	M365_G5_GCC
Microsoft 365 GCC G5 w/o WDATP/CAS Unified	M365_G5_GOV