MT.1022 - All users utilizing a P1 license should be licensed.
Overview
All users who utilize Entra ID P1 features should be licensed for Entra ID P1.
This test uses the Entra ID premium licence utilization insights in Microsoft Graph to compare the number of users covered by Conditional Access with the number of users entitled to an Entra ID P1 licence. The test fails when more users utilize P1 features than are licensed.
Remediation action
Assign Entra ID P1 licences to every user who is in scope of Conditional Access policies, or reduce the scope of those policies to licensed users.
To see licence counts and feature usage, open License usage in the Microsoft Entra admin center (Billing > Licenses).
Related links
- Microsoft Entra license usage insights - Microsoft Learn
- Introducing Microsoft Entra license utilization insights - Microsoft Community Hub
- Microsoft Entra licensing - Microsoft Learn
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1022 |
| Severity | Low |
| Suite | Maester |
| Product | Entra ID |
| Feature | Conditional Access |
| Area | Infrastructure hardening |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtCheckMT1022 |
| Services | Graph |
| Compatible licenses | AAD_PREMIUM |
Source
- Test:
tests/maester/entra/Test.MT.1022.ps1 - Documentation:
tests/maester/entra/Test.MT.1022.md