Free tool · 60 seconds
ENTRA ID P1 VS P2.
P1 secures most businesses. P2 adds PIM, risk-based Conditional Access and governance. Five questions tell you which you actually need — with the AUD price.
- 1
What do you license today?
- 2
Do you need just-in-time, time-boxed admin elevation (Privileged Identity Management)?
PIM removes standing Global Admin rights — admins request elevation when they need it.
- 3
Do you want risk-based Conditional Access — automatically challenging or blocking risky sign-ins?
Identity Protection scores sign-in and user risk and feeds it into policy. P2 only.
- 4
Do you need identity governance — access reviews, entitlement management, attestation?
Common driver for regulated industries, ISO 27001, SOCI and board assurance.
- 5
What best describes your organisation?
Common questions
Entra ID P1 vs P2, in plain English
- What's the difference between Entra ID P1 and P2?
- P1 covers Conditional Access, self-service password reset, dynamic groups and group-based licensing. P2 adds the governance and risk tier: Privileged Identity Management (just-in-time admin), Identity Protection (risk-based Conditional Access), access reviews and entitlement management.
- How much do Entra ID P1 and P2 cost in Australia?
- Indicative AUD list pricing is about AU$9.00/user/month for P1 and about AU$13.50/user/month for P2 (ex GST). Confirm current pricing with Microsoft or your partner at purchase.
- Do I already have Entra ID P2?
- If you license Microsoft 365 E5, EMS E5 or the Entra Suite, P2 is included. Many organisations pay for it and never turn on PIM or Identity Protection — so check what's licensed versus configured.
- Can I buy P2 for only some users?
- Yes. A common pattern is P2 for admins and high-risk users (to get PIM and Identity Protection) with P1 across the broader workforce, which controls cost while still removing standing admin access.
Want the full breakdown? Read the Entra ID P1 vs P2 guide (AUD).