Microsoft Defender for Cloud Apps Discovery
Not yet mapped to a curated capability.
Included in 28 licenses
Microsoft 365 Business Premium Business Standard plus a slice of enterprise security — Intune device management, Entra ID P1, and Defender for Business — for small businesses that need managed devices; capped at 300 seats.
Microsoft 365 E3 Office 365 E3's productivity core plus Windows, Intune device management, and Entra ID — the standard Microsoft 365 Enterprise plan; no seat cap.
Microsoft 365 F1 M365_F1_COMM
Microsoft 365 F1 A frontline-worker plan for staff without an assigned desk — Teams, shift management, and limited Office web apps; no desktop Office apps. M365_F1
Microsoft 365 F3 Office 365 F3 plus Windows, Intune, and Entra ID for frontline devices — the frontline-worker counterpart to Microsoft 365 E3.
Enterprise Mobility + Security
Enterprise Mobility + Security E3 Standalone identity and device management — Entra ID P1 and Intune — for organizations that need mobility/security management without a full Microsoft 365 suite.
Microsoft Entra ID
Microsoft Entra ID P1 Conditional access, self-service password reset, and group-based access management — the entry paid identity tier, standalone or bundled into several Microsoft 365 plans.
Microsoft Entra ID P2 Entra ID P1 plus identity protection (risk-based access) and privileged identity management — the top identity tier.