What this plan gives you
Identity & access
- Entra ID P2 (Identity Protection, PIM) Risk-based access and privileged identity management.
Threat protection
- Defender for Cloud Apps Cloud access security broker (CASB).
- Defender for Endpoint (Plan 2) Full endpoint detection and response (EDR).
- Defender for Identity On-prem identity threat detection.
- Defender for Office 365 (Plan 1) Safe Links / Safe Attachments for email and files.
- Defender for Office 365 (Plan 2) Anti-phishing plus threat hunting and automation.
- Microsoft 365 Defender (XDR) Unified incidents portal across Defender products.
Technical detail: the 8 underlying service plans
| Service (friendly) | Internal name | Capability |
|---|---|---|
| Microsoft 365 Defender | MTP | Microsoft 365 Defender (XDR) |
| MICROSOFT CLOUD APP SECURITY | ADALLOM_S_STANDALONE | Defender for Cloud Apps |
| Microsoft Defender for Endpoint | WINDEFATP | Defender for Endpoint (Plan 2) |
| MICROSOFT DEFENDER FOR IDENTITY | ATA | Defender for Identity |
| Microsoft Defender for Office 365 (Plan 1) | ATP_ENTERPRISE | Defender for Office 365 (Plan 1) |
| Microsoft Defender for Office 365 (Plan 2) | THREAT_INTELLIGENCE | Defender for Office 365 (Plan 2) |
| Microsoft Entra ID P2 | AAD_PREMIUM_P2 | Entra ID P2 (Identity Protection, PIM) |
| Office 365 SafeDocs | SAFEDOCS | Defender for Office 365 (Plan 1) |