Microsoft Entra Suite: the five products, and the P2 overlap
Microsoft Entra Suite
per user per month, excluding VAT
Ask a questionNo markup on top of Pax8's suggested retail. My margin is the Pax8 wholesale discount.
Check whether your current plan already includes this: Licence Overlap Check, free, and nothing leaves your browser.
The Microsoft Entra Suite brings five products together: Microsoft Entra Private Access, Microsoft Entra Internet Access, Microsoft Entra ID Governance, Microsoft Entra ID Protection and the premium capabilities of Microsoft Entra Verified ID. It requires a Microsoft Entra ID P1 subscription, or a plan that includes one, and it is included in Microsoft 365 E7. The detail worth knowing before comparing it against P2: the Suite carries Microsoft Entra ID Protection, which is otherwise a P2 feature, so it is a second route to risk-based Conditional Access from a P1 base rather than an addition on top of P2.
What it is
The Microsoft Entra Suite is a single subscription covering identity governance, identity protection and network access. It builds on Microsoft Entra ID, which supplies the directory, authentication and policy layer underneath every service in it.
What is in it
- Microsoft Entra Private Access, connecting remote users to private applications on-premises or across clouds without a legacy VPN
- Microsoft Entra Internet Access, an identity-centric secure web gateway for internet, SaaS and Microsoft 365 traffic
- Microsoft Entra ID Governance, covering entitlement management, access reviews, lifecycle workflows and Privileged Identity Management
- Microsoft Entra ID Protection, risk detection on users and sign-ins, and risk-based Conditional Access
- Microsoft Entra Verified ID, premium capabilities
Requirements
A Microsoft Entra ID P1 subscription, or a plan that includes P1 such as Microsoft 365 E3, Business Premium, F1 or F3. Licences are assigned to users and groups through the Microsoft 365 admin center.
Where it already exists
Microsoft 365 E7 includes the Entra Suite. On E7 this subscription adds nothing.
How to think about it against Entra ID P2
They overlap rather than stack. Microsoft Entra ID Protection and Privileged Identity Management are P2 capabilities, and the Suite carries both, so a P1 customer reaches risk-based Conditional Access and just-in-time privilege through either route. The Suite adds what P2 does not have at all: the two network access products, and the advanced governance capabilities beyond what P2 carries. Work out which of those five you will actually deploy before comparing it against P2.
What does the Microsoft Entra Suite include?
Five products: Microsoft Entra Private Access, Microsoft Entra Internet Access, Microsoft Entra ID Governance, Microsoft Entra ID Protection, and the premium capabilities of Microsoft Entra Verified ID.
Do I need Microsoft Entra ID P1 as well?
Yes. The Suite requires a Microsoft Entra ID P1 subscription or a plan that includes one, such as Microsoft 365 E3, Business Premium, F1 or F3. It builds on Entra ID rather than replacing it.
Is it worth buying on top of Microsoft Entra ID P2?
They overlap. Identity Protection and Privileged Identity Management are P2 capabilities and the Suite carries both, so the Suite is a second route to them rather than a layer on top. What it genuinely adds beyond P2 is the two network access products and the advanced governance capabilities.
Is it already included in any Microsoft 365 plan?
Yes, in Microsoft 365 E7. On E7 the standalone Suite adds nothing.
Can I buy just one of the five products?
Yes. Entra ID Governance, Private Access and Internet Access are each sold on their own, so a single requirement does not force the whole Suite.
- Vendor
- Microsoft
- Category
- Security
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- 1-Year, Monthly
- SKU
- MST-NCE-9ES-C100
- 1You request the licence, or add it to the cart.
- 2I confirm price, term and seats, and check your VAT number in VIES. Businesses in the EU only.
- 3You pay before we provision, under the CSP Marketplace Terms. The invoice comes from Michal Jatczak, a sole trader registered in Malta, trading as ITSailor. Reverse charge for an EU VAT number that validates in VIES.
- 4Your authorised signatory accepts the Microsoft Customer Agreement before activation.
- 5I place the order with Pax8 within one business day of payment.