Microsoft Entra ID Governance [New Commerce Experience]
Microsoft Entra ID Governance
Microsoft Entra ID Governance is the advanced identity governance product for organisations already holding Microsoft Entra ID P1 or P2. It contains the entitlement management, access reviews and Privileged Identity Management capabilities that P2 carries, and adds what P2 does not: lifecycle workflows with custom extensions, account discovery, machine learning assisted access certifications, catalog access reviews and integration between entitlement management and Microsoft Purview Insider Risk Management. Microsoft sells it as six variants that differ only in their prerequisite, so the one you need depends on the identity plan already assigned rather than on the capability you want.
What it is
Microsoft Entra ID Governance automates who gets access to what, for how long, and who confirms it was still appropriate. It manages access requests, assignments and reviews, and the joiner, mover and leaver lifecycle behind them.
Who it is for
Organisations that have to evidence access decisions rather than assert them: anyone answering to an auditor, a customer security review, or an EU operational resilience obligation, and anyone whose leaver process currently depends on somebody remembering.
What it adds over Microsoft Entra ID P2
P2 already carries entitlement management, access reviews and Privileged Identity Management. ID Governance contains those and adds capabilities P2 does not have, including:
- Lifecycle workflows, with custom extensions through Logic Apps
- Account discovery
- Machine learning assisted access certifications and reviews
- Access reviews scoped to inactive users, and catalog access reviews
- Entitlement management integrated with Microsoft Purview Insider Risk Management
- Suggested access packages and approver delegation in the My Access portal
Requirements
Microsoft Entra ID P1 or P2. Microsoft publishes six variants of this product, including step-up editions for existing P2 and F2 holders, frontline worker and government editions. They differ only in their prerequisite, not in what they do, so the correct one follows from the identity licence already assigned.
Where it already exists
The Microsoft Entra Suite includes the same governance capabilities, and Microsoft 365 E7 includes them through the Suite. On either, this standalone product adds nothing.
What does this add over Microsoft Entra ID P2?
P2 carries entitlement management, access reviews and Privileged Identity Management. ID Governance contains those and adds lifecycle workflows with custom extensions, account discovery, machine learning assisted access certifications, catalog access reviews and entitlement management integrated with Microsoft Purview Insider Risk Management.
Why are there six versions of this product?
They differ only in their prerequisite, not in capability. Microsoft publishes a base product, step-up editions for existing Entra ID P2 and F2 holders, a frontline worker edition, and two government editions. The right one follows from the identity licence already assigned.
Do I need Microsoft Entra ID P1 or P2 as well?
Yes. ID Governance is an advanced capability set for existing Entra ID P1 and P2 customers, not a standalone identity service.
Is it already included anywhere?
Yes, in the Microsoft Entra Suite, and in Microsoft 365 E7 through the Suite. On either of those this product adds nothing.
What is the practical difference lifecycle workflows make?
They turn joiner, mover and leaver handling into a workflow that runs from the directory rather than from a checklist, and they can call out to Logic Apps for steps that live in other systems.
- Vendor
- Microsoft
- Category
- Security
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- Monthly, 1-Year
- Unit price
- €6.40 /mo
- SKU
- MST-NCE-EIG-C100
Attachable SKUs from the same category. Check each add-on's prerequisites for base-licence eligibility.
- 1You prepay through ITSailor (Malta) — VAT handled, reverse-charge for valid EU VAT IDs.
- 2We provision through Pax8 wholesale into your Microsoft tenant — no third-party MSP markup.
- 3You keep the tenant. Sovereign by default — every engagement closes with an Exit Kit.
Pax8 wholesale, margin in the price
Microsoft Defender Vulnerability Management Add-on (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management add-on is available to Defender for Endpoint Plan 2 customers to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.
Microsoft Entra ID P1 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P1 provides single sign-on to thousands of cloud (SaaS) apps and access to web apps you run on-premises. Built for ease of use, Microsoft Entra ID P1 features multi-factor authentication (MFA); access control based on device health, user location, and identity; and holistic security reports, audits,
Microsoft Entra ID P2 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P2 includes all the capabilities of P1 plus advanced identity protection features such as Identity Protection, which helps detect potential vulnerabilities affecting your organization’s identities, and Privileged Identity Management, which helps manage, control, and monitor access within your organiz
Microsoft Defender Vulnerability Management (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management standalone is a comprehensive vulnerability management solution to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.