What the Entra Suite is
Microsoft Entra Suite is the bundle Microsoft sells above Entra ID P2. Its own pricing page describes it as combining network access, identity protection, governance and identity verification, and Microsoft Learn spells out the five products inside: Microsoft Entra Private Access (the VPN replacement), Microsoft Entra Internet Access (the secure web gateway), Microsoft Entra ID Governance (entitlement management, access reviews and lifecycle workflows), Microsoft Entra ID Protection (risk-based Conditional Access) and the premium capabilities of Microsoft Entra Verified ID, notably Face Check. It is sold as a standalone add-on or arrives inside Microsoft 365 E7. Verified ID's basic service is free with any Entra ID subscription; only the premium layer is Suite-gated.
What it costs in Australia
Microsoft's Australian pricing page lists the Suite at AU$18.00 per user per month, paid yearly, before GST; the US list is US$12.00 (both checked September 2026). The components sold separately on the same page are Entra ID Governance at AU$10.50, Internet Access at AU$7.50 and Private Access at AU$7.50 per user per month, so buying any two of them already costs more than the Suite. For reference, Entra ID P1 lists at AU$10.50 and P2 at AU$15.00. Microsoft says special pricing exists for Entra ID P2 and Microsoft 365 E5 customers but does not publish the number on the public page — ask your CSP for the E5 step-up rate before modelling anything.
The prerequisite is P1, not P2
A common misreading is that the Suite needs E5 or P2 underneath it. Microsoft's pricing page is explicit: a subscription to Entra ID P1, or a package that includes P1, is required. P1 sits inside Microsoft 365 E3, E5 and Business Premium, so almost every Australian tenant on a current plan already qualifies. E5 customers do get a wrinkle worth knowing: E5 already includes P2, and P2 already includes ID Protection, so for them the Suite is effectively buying Private Access, Internet Access, ID Governance and Face Check. That overlap is exactly why Microsoft offers those customers a lower price.
When Entra ID P2 alone is enough
P2 gives you risk-based Conditional Access, Privileged Identity Management and access reviews — the controls most Australian security frameworks actually ask for. If your remote-access story is a VPN or ZTNA product you are happy with, your web filtering is handled elsewhere, and joiner-mover-leaver automation is a script rather than a business process, P2 covers you and the Suite is AU$3.00 a month more than P2 for features you will not switch on. The Suite earns its keep when you want to retire a third-party VPN or secure web gateway, or when audit findings keep coming back to orphaned access and manual reviews.
Frontrow's read
Treat the Suite as a network-security purchase that happens to be licensed through identity. Price it against the VPN, SWG and governance tools it replaces, not against P2. For an E3 tenant, AU$18.00 buys P1-plus-everything; for an E5 tenant, get the special price in writing and compare it with the standalone components you would actually deploy. Then sequence the rollout: Conditional Access and ID Protection first, Private Access for the apps behind the VPN second, ID Governance once ownership of groups and apps is clean. Buying the Suite before that hygiene exists is the same waste pattern Frontrow sees with unused E5 security.