Azure AD Premium P1 vs. P2 feature comparison

Johnharper

Now that you've got a basic understanding of Azure AD and its four editions, let's look at what you get with Azure AD Premium P1 vs. P2. There are four main reasons to choose Premium P2:

1. The identity protection feature in Premium P2 gives an overview of questionable authentication attempts. It looks at logins and assesses how risky they might be, such as detecting an account sign-in from one country, then a different country 10 minutes later. Administrators can handle those suspicious authentication attempts automatically with policies that can force Azure AD MFA or block access entirely. Identity protection is one of the best arguments for going to P2, as it greatly reduces many risks related to user access.

2. Privileged Identity Management (PIM) is a set of controls to manage higher-level access accounts in Azure AD. It includes security features such as just-in-time access to temporarily grant rights and remove them with full logging and auditing. Workflows with justification and notifications can be triggered around activation of these privileges, too. If you have to contend with a lot of rogue changes in your environment, PIM could help you regain control.

3. The access reviews feature ensures only the right staff can use specific resources. This is helpful when onboarding and offboarding staff, or when personnel change roles. You can also put checks on existing users to review their access to resources and push these decisions toward application owners. You can tailor recurring checks to meet business requirements or to fulfill compliance rules. It's a nice feature to give you more control to allow or block access to important resources without having to remember to do so.

4. Entitlement management is an identity governance feature that uses automation to manage identity lifecycles, access lifecycles and privileged access. It provides controls to give access to the organization's resources, such as groups and applications, for both internal and external users. Entitlement management uses an access package that bundles the assorted resources, such as SharePoint Online sites and cloud app access rights, used in the request process.


Choosing an Azure AD license

As previously noted, there are four Azure AD options. The Free version is best suited for small organizations and dev/test environments, while the Office 365/Microsoft 365 version comes with added features to work with the functionality on the Microsoft collaboration platform, but nothing more.

The Azure AD Premium P1 and P2 editions target enterprise-class environments that require advanced access control capabilities. Azure AD Premium P2 is a good fit for organizations in heavily regulated industries, such as government or healthcare, or for those that require the strongest possible security.


Also, To know more about Azure Devops Server visit Apps4rent.