Entra ID Tiers

• ​​​​​Four tiers of Entra ID (formerly Azure Active Directory) services are available; one free and three paid.
• Organizations should proceed carefully when taking advantage of features included in the paid tiers of Entra ID, as it can obligate them to license the entire organization for that tier.
• Customers can mix tiers, but this will result in license compliance issues.

The free tier of Entra ID offers sign-on to Microsoft and some third-party hosted services, password change support, and basic reporting. A level of Entra ID services included in Office 365 and the two paid tiers of Entra ID are intended to allow organizations to integrate and manage user- and group-based security in Microsoft’s hosted directory more easily. A new paid add-on tier of service, Entra ID Governance, is intended to build on the lower paid tiers of Entra ID and help organizations perform identity governance and application life-cycle management tasks more rapidly and reliably. However, Entra ID Governance brings significant cost and includes an incomplete set of as-yet unproven features. All paid tiers of service require User Subscription Licenses (User SLs) for every user benefitting from the capabilities in the highest licensed tier.