Microsoft Entra Private Access: scope and prerequisites
Microsoft Entra Private Access
per user per month, excluding VAT
Ask a questionNo markup on top of Pax8's suggested retail. My margin is the Pax8 wholesale discount.
Check whether your current plan already includes this: Licence Overlap Check, free, and nothing leaves your browser.
Microsoft Entra Private Access gives remote users access to internal applications without a legacy VPN. It connects users from any device and any network to private applications, whether those sit on-premises, across clouds, or in both, and it applies Microsoft Entra identity and Conditional Access policy to that connection rather than granting network-level reach. It requires a Microsoft Entra ID P1 subscription or a plan that includes one, and it is one of the five products inside the Microsoft Entra Suite, which is itself included in Microsoft 365 E7. Buying it standalone makes sense when private application access is the only part of the Suite you need.
What it is
Microsoft Entra Private Access is the private half of Microsoft's Global Secure Access. It publishes internal applications to remote users through an identity-aware path instead of a network tunnel, so access is granted per application and per policy rather than per network segment.
Who it is for
Organisations still running a VPN purely so that remote staff can reach a handful of internal systems, and organisations that want Conditional Access to apply to internal applications the same way it applies to cloud ones.
Key capabilities
- Access to private applications on-premises and across clouds, from any device and network
- Identity-centric access decisions rather than network-level reach
- Microsoft Entra Conditional Access applied to internal application access
- Managed through the Microsoft Entra admin centre alongside the rest of identity policy
Requirements
A Microsoft Entra ID P1 subscription, or a plan that includes P1 such as Microsoft 365 E3, Business Premium, F1 or F3.
Where it already exists
The Microsoft Entra Suite includes Private Access, and Microsoft 365 E7 includes the Suite. On either of those, this standalone product adds nothing. If you need two or more of the five Suite products, compare the Suite before buying these separately.
Does this replace a VPN?
That is its purpose: connecting remote users to private applications without the risk and operational overhead of a legacy VPN. Whether it replaces yours entirely depends on what else that VPN carries.
What licence do I need underneath it?
A Microsoft Entra ID P1 subscription, or a plan that includes P1, such as Microsoft 365 E3, Business Premium, F1 or F3.
Is it already included in a plan I might hold?
It is one of the five products in the Microsoft Entra Suite, and Microsoft 365 E7 includes the Suite. On either, this standalone licence adds nothing.
How is this different from Microsoft Entra Internet Access?
Private Access covers traffic to your own internal applications. Internet Access covers traffic going out to the internet, SaaS and Microsoft 365. They are the two halves of Global Secure Access and are sold separately.
- Vendor
- Microsoft
- Category
- Security
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- 1-Year, Monthly
- SKU
- MST-NCE-EPA-C100
- 1You request the licence, or add it to the cart.
- 2I confirm price, term and seats, and check your VAT number in VIES. Businesses in the EU only.
- 3You pay before we provision, under the CSP Marketplace Terms. The invoice comes from Michal Jatczak, a sole trader registered in Malta, trading as ITSailor. Reverse charge for an EU VAT number that validates in VIES.
- 4Your authorised signatory accepts the Microsoft Customer Agreement before activation.
- 5I place the order with Pax8 within one business day of payment.