[Intune] Upgrade to Azure Entra Premium P2 for advanced security and identity protection
Recommendation Impact Across KPIs
| KPI | Impact | Calculated? |
|---|---|---|
| Reliability: | No direct reliability impact identified | ❌ |
| Security Compliance: | PRIMARY REC - Enhanced security through Conditional Access, Identity Protection, and PIM | ✅ |
| Economic: | No direct economic impact calculated | ❌ |
| User Experience: | No direct user experience impact calculated | ❌ |
| Environment: | No direct environmental impact calculated | ❌ |
Score Calculation
1. Data Ingestion
- Asset Name: License
- Current License Status
- User Count and License Distribution
2. Data Enrichment
- Mapping to NIST Security Framework
- Azure Entra Premium P2 feature set
- Compliance requirements mapping
3. Health Score
- Calculate the Health score based on NIST Score * NIST Asset Weight
- Multiplier applied for length of compliance from recommendation load date
Example Graph
Pie Chart showing the distribution of P1 and P2 SKUs across the organization, highlighting the current licensing status and upgrade opportunities.
Business Opportunities
Product Sales Opportunity
As a provider this recommendation provides an opportunity to generate revenue through Azure Entra Premium P2 license sales. The platform will identify specific upgrade paths with estimated annual USD revenue calculations based on the Microsoft 365 pricing table.
Professional Services Opportunity
The recommendation provides an opportunity for migration and implementation services, including policy configuration, security feature enablement, and user training.
Remediation Guidance
To resolve the recommendation the following steps are recommended:
- Develop an Upgrade Plan
- Identify Affected Accounts and Licenses
- Assess Security Needs
Allocate Resources
Communicate with Stakeholders
- Notify IT and Security Teams
- Explain Benefits to Users
Coordinate with Departments
Execute the Upgrade
- Assign Azure Entra Premium P2 Licenses
- Enable Security Features
Configure Security Policies
Post-Upgrade Monitoring & Optimization
- Verify Feature Activation
- Monitor Risk Indicators
Test Access and Compliance
Ongoing Maintenance
- Regularly Review Security Reports
- Update Conditional Access Policies
- Provide Training and Awareness
Supporting Information
Supported Data Sources
- Microsoft Graph Entra
- Microsoft Graph Intune
Recommendation Categorisation
- Security
- Licensing
- Identity Management
Supported Instances
- Azure Entra ID
- Microsoft 365
API Information
- Graph API Endpoint: GET https://graph.microsoft.com/v1.0/organization/{organizationId}/licenseDetails
- Reference Documentation: https://learn.microsoft.com/en-us/entra/identity/users/licensing-service-plan-reference