Enterprise Mobility + Security E5
Entra & Identity
String ID EMSPREMIUM
GUID b05e124f-c7cc-45a0-a6aa-8cf78c946968
Capabilities
7
Underlying services
10
Audience
Commercial
Type
Suite
What this plan gives you 7 capabilities
Identity & access
- Entra ID P1 (Conditional Access, SSO) Conditional access, self-service, SSO.
- Entra ID P2 (Identity Protection, PIM) Risk-based access, privileged identity mgmt.
- Multi-factor authentication Standalone Azure MFA.
Devices & management
- Intune (full device management) Full MDM/MAM for PCs and mobile.
Threat protection
- Defender for Cloud Apps Cloud access security broker (CASB).
- Defender for Identity On-prem identity threat detection.
Information protection & compliance
- Information protection & encryption Rights management, AIP labels, message encryption.
Show the 10 underlying service plans (Microsoft's raw identifiers)
| Service (friendly) | Internal name | Capability |
|---|---|---|
| AZURE INFORMATION PROTECTION PREMIUM P2 | RMS_S_PREMIUM2 | Information protection & encryption |
| Azure Rights Management | RMS_S_ENTERPRISE | Information protection & encryption |
| Exchange Foundation | EXCHANGE_S_FOUNDATION | — |
| Microsoft Azure Multi-Factor Authentication | MFA_PREMIUM | Multi-factor authentication |
| MICROSOFT CLOUD APP SECURITY | ADALLOM_S_STANDALONE | Defender for Cloud Apps |
| MICROSOFT DEFENDER FOR IDENTITY | ATA | Defender for Identity |
| Microsoft Entra ID P1 | AAD_PREMIUM | Entra ID P1 (Conditional Access, SSO) |
| Microsoft Entra ID P2 | AAD_PREMIUM_P2 | Entra ID P2 (Identity Protection, PIM) |
| Microsoft Entra RIGHTS | RMS_S_PREMIUM | Information protection & encryption |
| Microsoft Intune | INTUNE_A | Intune (full device management) |