Microsoft Entra Private Access [New Commerce Experience]
Microsoft Entra Private Access
Microsoft Entra Private Access gives remote users access to internal applications without a legacy VPN. It connects users from any device and any network to private applications, whether those sit on-premises, across clouds, or in both, and it applies Microsoft Entra identity and Conditional Access policy to that connection rather than granting network-level reach. It requires a Microsoft Entra ID P1 subscription or a plan that includes one, and it is one of the five products inside the Microsoft Entra Suite, which is itself included in Microsoft 365 E7. Buying it standalone makes sense when private application access is the only part of the Suite you need.
What it is
Microsoft Entra Private Access is the private half of Microsoft's Global Secure Access. It publishes internal applications to remote users through an identity-aware path instead of a network tunnel, so access is granted per application and per policy rather than per network segment.
Who it is for
Organisations still running a VPN purely so that remote staff can reach a handful of internal systems, and organisations that want Conditional Access to apply to internal applications the same way it applies to cloud ones.
Key capabilities
- Access to private applications on-premises and across clouds, from any device and network
- Identity-centric access decisions rather than network-level reach
- Microsoft Entra Conditional Access applied to internal application access
- Managed through the Microsoft Entra admin centre alongside the rest of identity policy
Requirements
A Microsoft Entra ID P1 subscription, or a plan that includes P1 such as Microsoft 365 E3, Business Premium, F1 or F3.
Where it already exists
The Microsoft Entra Suite includes Private Access, and Microsoft 365 E7 includes the Suite. On either of those, this standalone product adds nothing. If you need two or more of the five Suite products, compare the Suite before buying these separately.
Does this replace a VPN?
That is its purpose: connecting remote users to private applications without the risk and operational overhead of a legacy VPN. Whether it replaces yours entirely depends on what else that VPN carries.
What licence do I need underneath it?
A Microsoft Entra ID P1 subscription, or a plan that includes P1, such as Microsoft 365 E3, Business Premium, F1 or F3.
Is it already included in a plan I might hold?
It is one of the five products in the Microsoft Entra Suite, and Microsoft 365 E7 includes the Suite. On either, this standalone licence adds nothing.
How is this different from Microsoft Entra Internet Access?
Private Access covers traffic to your own internal applications. Internet Access covers traffic going out to the internet, SaaS and Microsoft 365. They are the two halves of Global Secure Access and are sold separately.
- Vendor
- Microsoft
- Category
- Security
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- 1-Year, Monthly
- Unit price
- €4.60 /mo
- SKU
- MST-NCE-EPA-C100
Attachable SKUs from the same category. Check each add-on's prerequisites for base-licence eligibility.
- 1You prepay through ITSailor (Malta) — VAT handled, reverse-charge for valid EU VAT IDs.
- 2We provision through Pax8 wholesale into your Microsoft tenant — no third-party MSP markup.
- 3You keep the tenant. Sovereign by default — every engagement closes with an Exit Kit.
Pax8 wholesale, margin in the price
Microsoft Defender Vulnerability Management Add-on (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management add-on is available to Defender for Endpoint Plan 2 customers to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.
Microsoft Entra ID P1 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P1 provides single sign-on to thousands of cloud (SaaS) apps and access to web apps you run on-premises. Built for ease of use, Microsoft Entra ID P1 features multi-factor authentication (MFA); access control based on device health, user location, and identity; and holistic security reports, audits,
Microsoft Entra ID P2 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P2 includes all the capabilities of P1 plus advanced identity protection features such as Identity Protection, which helps detect potential vulnerabilities affecting your organization’s identities, and Privileged Identity Management, which helps manage, control, and monitor access within your organiz
Microsoft Defender Vulnerability Management (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management standalone is a comprehensive vulnerability management solution to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.