← Comparisons

Entra ID P1 vs P2 vs Entra Suite

Identity tiers: Conditional Access, risk-based policies, governance and Global Secure Access.

The options

Microsoft Entra ID P1
AAD_PREMIUM
CHF 5.70
user/month
Microsoft list price for Switzerland, excl. VAT, as of 25 September 20261
Includes
- SSO, MFA, Conditional Access, passwordless, hybrid identity, self-service, cross-tenant sync, Verified ID credentials2
- Microsoft traffic profile of Global Secure Access (Internet Access for Microsoft services)3
- Microsoft Entra application proxy4
- Included in M365 E3 / Business Premium / EMS E32
Microsoft Entra ID P2
AAD_PREMIUM_P2
CHF 8.10
user/month
Microsoft list price for Switzerland, excl. VAT, as of 25 September 20261
Includes
- P1 + ID Protection, risk-based Conditional Access, PIM, basic entitlement management, basic access reviews2
- Included in M365 E52
Microsoft Entra ID Governance
Microsoft_Entra_ID_Governance
CHF 5.70
user/month
Microsoft list price for Switzerland, excl. VAT, as of 25 September 20261
Includes
- Lifecycle workflows, account discovery, ML-assisted access reviews, automatic assignment policies and other advanced IGA5
Limits
- No new IGA features are added to P2; guests billed MAU via Azure subscription5
Requires
- Entra ID P1 or P2 (P2 step-up variant for P2 customers)5
Microsoft Entra Suite
CHF 9.70
user/month
Microsoft list price for Switzerland, excl. VAT, as of 25 September 20261
Includes
- Private Access, Internet Access, ID Governance, ID Protection, Verified ID6
- Included in Microsoft 365 E72
Requires
- Entra ID P16

Key differences

P1 = core IAM + Conditional Access; P2 = risk-based protection + PIM; Suite = ZTNA/SSE (Private + Internet Access) + full governance + ID Protection + Verified ID2
USD list effective 2026-07-01: Entra P1 $6->$7, P2 $9->$107

Who it’s for

P1: every tenant needing Conditional Access (usually via M365 E3 / Business Premium)
P2: organisations needing risk-based access and privileged identity management
Entra Suite: organisations replacing VPN with ZTNA and needing advanced identity governance

ClearSource’s reading of Microsoft’s documentation — not a recommendation for your situation.

What changed recently

1 July 2026
Entra P1/P2 USD list increases7
2026-06
Microsoft Entra Suite added to Modern Work Plan Comparison (June 2026)8

Where Microsoft’s own pages disagree

Microsoft 365 E7: the Swiss comparison table doesn’t show clearly which Intune Suite items (Remote Help, Enterprise App Management, Endpoint Privilege Management, Advanced Analytics, Cloud PKI, Plan 2) are included; Microsoft’s pricing update says the E5 packaging changes apply to E7 too.9 7
Naming: Microsoft Learn (17 September 2026) calls the products “Microsoft Copilot” and “Microsoft Copilot Business”, while the Swiss and US pricing pages still say “Microsoft 365 Copilot” and Microsoft’s licensing list still says “Microsoft Copilot for Microsoft 365” (Microsoft_365_Copilot).10 11 12
Microsoft’s plan-comparison PDF shows inclusions as graphics only; that F1 and F3 include Entra ID P1 and Intune Plan 1 follows from its footnotes and add-on table.8

Sources

1microsoft.com
2Microsoft Entra pricing (de-ch) (24 September 2026)
3What is Global Secure Access? (Microsoft Learn) (19 May 2026)
4Microsoft Entra application proxy FAQ (Microsoft Learn) (1 May 2026)
5Microsoft Entra ID Governance licensing fundamentals (Microsoft Learn) (14 September 2026)
6Try Microsoft Entra Suite (Microsoft Learn) (9 April 2026)
72026 Microsoft 365 packaging and pricing updates (Microsoft Licensing news) (16 February 2026)
8Modern Work Plan Comparison - Enterprise (Microsoft PDF, publish date September 1, 2026) (1 September 2026)
9microsoft.com
10learn.microsoft.com
11microsoft.com
12Product names and service plan identifiers for licensing (Microsoft CSV) (19 August 2026)

Official Microsoft pages (and, for print services, the vendors’ price pages), read on or before 24 September 2026.

Keep reading

Related comparisons