Lizenz-SKU-ReferenzLicense SKU Reference

Produktnamen, SKU-IDs, Service-Pläne, Vergleichstabellen und PowerShell-Beispiele für Microsoft 365 und Entra ID.Product names, SKU IDs, service plans, comparison tables, and PowerShell examples for Microsoft 365 and Entra ID.

Hinweis zur GenauigkeitAccuracy note

SKU- und Service-Plan-Metadaten ändern sich regelmäßig. Nutze diese Seite als operative Referenz und prüfe produktive Daten mit Get-MgSubscribedSku oder im Microsoft-Learn-Referenzkatalog.SKU and service plan metadata changes regularly. Use this page as an operational reference and verify production data with Get-MgSubscribedSku or the Microsoft Learn reference catalog.

LizenzmodellLicensing model

Ein Tenant besitzt kaufmännische Abonnements, daraus resultierende SKUs und innerhalb jeder SKU einzelne Service Plans. Eine Benutzerlizenz ist deshalb nie nur “E3” oder “Business Premium”, sondern technisch eine SKU plus eine Menge aktivierter oder deaktivierter Dienstpläne.A tenant has commercial subscriptions, resulting SKUs, and within each SKU individual service plans. A user license is therefore never just “E3” or “Business Premium”; technically it is a SKU plus a set of enabled or disabled service plans.

EbeneLayer BeispielExample Warum wichtig?Why it matters?
Friendly NameFriendly name Microsoft 365 E3Microsoft 365 E3 Vom Einkauf und Admin Center sichtbarVisible to procurement and the admin center
String IDString ID SPE_E3SPE_E3 Wichtig für Skripte, CSVs und ReportsImportant for scripts, CSVs, and reports
SKU GUIDSKU GUID 05e9a617-0261-4cee-bb44-138d3ef5d96505e9a617-0261-4cee-bb44-138d3ef5d965 Technischer Schlüssel in GraphTechnical key in Graph
Service PlanService plan EXCHANGE_S_ENTERPRISEEXCHANGE_S_ENTERPRISE Steuert einzelne Workloads innerhalb der LizenzControls individual workloads inside the license

Häufige SKU-TabelleCommon SKU table

ProduktProduct String IDString ID GUID / SkuIdGUID / SkuId Service-Pläne (Kurzfassung)Service plans (summary)
Microsoft 365 E1Microsoft 365 E1 SPE_E1SPE_E1 18181a46-0d4e-45cd-891e-60aabd171b4e18181a46-0d4e-45cd-891e-60aabd171b4e Office Apps Web, Exchange, SharePoint, Teams, Entra ID FreeOffice Apps Web, Exchange, SharePoint, Teams, Entra ID Free
Microsoft 365 E3Microsoft 365 E3 SPE_E3SPE_E3 05e9a617-0261-4cee-bb44-138d3ef5d96505e9a617-0261-4cee-bb44-138d3ef5d965 Office Apps, Exchange Plan 2, SharePoint, Teams, Intune, Entra ID P1Office Apps, Exchange Plan 2, SharePoint, Teams, Intune, Entra ID P1
Microsoft 365 E5Microsoft 365 E5 SPE_E5SPE_E5 06ebc4ee-1bb5-47dd-8120-11324bc54e0606ebc4ee-1bb5-47dd-8120-11324bc54e06 E3 plus Entra ID P2, Defender, Audio Conferencing, advanced securityE3 plus Entra ID P2, Defender, Audio Conferencing, advanced security
Microsoft 365 F1Microsoft 365 F1 SPE_F1SPE_F1 44575883-256e-4a79-9da4-ebe9acabe2b244575883-256e-4a79-9da4-ebe9acabe2b2 Web apps, Teams, SharePoint, kiosk-style frontline accessWeb apps, Teams, SharePoint, kiosk-style frontline access
Microsoft 365 F3Microsoft 365 F3 SPE_F3SPE_F3 66b55226-6b4f-492c-910c-a3b7a3c9d99366b55226-6b4f-492c-910c-a3b7a3c9d993 Frontline suite with Teams, SharePoint, Exchange, Intune, Entra ID P1Frontline suite with Teams, SharePoint, Exchange, Intune, Entra ID P1
Microsoft 365 Business BasicMicrosoft 365 Business Basic SMB_BUSINESS_ESSENTIALSSMB_BUSINESS_ESSENTIALS 3b555118-da6a-4418-894f-7df1e20968703b555118-da6a-4418-894f-7df1e2096870 Exchange, Teams, SharePoint, OneDrive, web appsExchange, Teams, SharePoint, OneDrive, web apps
Microsoft 365 Business StandardMicrosoft 365 Business Standard SMB_BUSINESSSMB_BUSINESS f245ecc8-75af-4f8e-b61f-27d8114de5f3f245ecc8-75af-4f8e-b61f-27d8114de5f3 Business Basic plus desktop Office appsBusiness Basic plus desktop Office apps
Microsoft 365 Business PremiumMicrosoft 365 Business Premium SPBSPB cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46 Business Standard plus Intune, Defender for Business, Entra ID P1Business Standard plus Intune, Defender for Business, Entra ID P1
Office 365 E1Office 365 E1 STANDARDPACKSTANDARDPACK 18181a46-0d4e-45cd-891e-60aabd171b4e18181a46-0d4e-45cd-891e-60aabd171b4e Exchange, Teams, SharePoint, OneDrive, web appsExchange, Teams, SharePoint, OneDrive, web apps
Office 365 E3Office 365 E3 ENTERPRISEPACKENTERPRISEPACK 6fd2c87f-b296-42f0-b197-1e91e994b9006fd2c87f-b296-42f0-b197-1e91e994b900 Exchange Plan 2, Office apps, SharePoint, TeamsExchange Plan 2, Office apps, SharePoint, Teams
Office 365 E5Office 365 E5 ENTERPRISEPREMIUMENTERPRISEPREMIUM c7df2760-2c81-4ef7-b578-5b5392b571dfc7df2760-2c81-4ef7-b578-5b5392b571df Office 365 E3 plus advanced compliance, voice and analytics featuresOffice 365 E3 plus advanced compliance, voice and analytics features
Office 365 F3Office 365 F3 DESKLESSPACKDESKLESSPACK verify-in-tenantverify-in-tenant Frontline Office 365 services without full desktop suiteFrontline Office 365 services without full desktop suite
Enterprise Mobility + Security E3Enterprise Mobility + Security E3 EMSEMS efccb6f7-5641-4e0e-bd10-b4976e1bf68eefccb6f7-5641-4e0e-bd10-b4976e1bf68e Entra ID P1, Intune, Azure Information Protection P1Entra ID P1, Intune, Azure Information Protection P1
Enterprise Mobility + Security E5Enterprise Mobility + Security E5 EMSPREMIUMEMSPREMIUM b05e124f-c7cc-45a0-a6aa-8cf78c946968b05e124f-c7cc-45a0-a6aa-8cf78c946968 EMS E3 plus Entra ID P2, Defender for Cloud Apps, Identity GovernanceEMS E3 plus Entra ID P2, Defender for Cloud Apps, Identity Governance
Microsoft Entra ID P1Microsoft Entra ID P1 AAD_PREMIUMAAD_PREMIUM 078d2b04-f1bd-4111-bbd4-b4b1b354cef4078d2b04-f1bd-4111-bbd4-b4b1b354cef4 Conditional Access, dynamic groups, self-service featuresConditional Access, dynamic groups, self-service features
Microsoft Entra ID P2Microsoft Entra ID P2 AAD_PREMIUM_P2AAD_PREMIUM_P2 84a661c4-e949-4bd2-a560-ed7766fcaf2b84a661c4-e949-4bd2-a560-ed7766fcaf2b P1 plus PIM, Identity Protection, access reviewsP1 plus PIM, Identity Protection, access reviews
Microsoft Intune Plan 1Microsoft Intune Plan 1 INTUNE_AINTUNE_A 061f9ace-7d42-4136-88ac-31dc755f143f061f9ace-7d42-4136-88ac-31dc755f143f MDM, MAM, device compliance, app protectionMDM, MAM, device compliance, app protection
Microsoft Intune SuiteMicrosoft Intune Suite INTUNE_SUITEINTUNE_SUITE verify-in-tenantverify-in-tenant Advanced endpoint privilege management, remote help, analyticsAdvanced endpoint privilege management, remote help, analytics
Defender for Office 365 P1Defender for Office 365 P1 ATP_ENTERPRISEATP_ENTERPRISE 4ef96642-f517-4cd1-b2ba-ce56799543a64ef96642-f517-4cd1-b2ba-ce56799543a6 Safe Links, Safe Attachments, anti-phish basicsSafe Links, Safe Attachments, anti-phish basics
Defender for Office 365 P2Defender for Office 365 P2 THREAT_INTELLIGENCETHREAT_INTELLIGENCE 8e0c0a52-6a6c-4d40-8370-dd62ef7961fa8e0c0a52-6a6c-4d40-8370-dd62ef7961fa P1 plus investigation, simulation, advanced hunting integrationsP1 plus investigation, simulation, advanced hunting integrations
Defender for Endpoint P1Defender for Endpoint P1 DEFENDER_ENDPOINT_P1DEFENDER_ENDPOINT_P1 verify-in-tenantverify-in-tenant Endpoint detection baseline and device risk signalsEndpoint detection baseline and device risk signals
Defender for Endpoint P2Defender for Endpoint P2 DEFENDER_ENDPOINT_P2DEFENDER_ENDPOINT_P2 verify-in-tenantverify-in-tenant Advanced endpoint detection and responseAdvanced endpoint detection and response
Defender for Cloud AppsDefender for Cloud Apps CLOUD_APP_SECURITYCLOUD_APP_SECURITY verify-in-tenantverify-in-tenant CASB, session controls, discovery and governanceCASB, session controls, discovery and governance
Microsoft Defender XDRMicrosoft Defender XDR M365_SECURITYM365_SECURITY verify-in-tenantverify-in-tenant Cross-workload incident correlation and huntingCross-workload incident correlation and hunting
Exchange Online Plan 1Exchange Online Plan 1 EXCHANGESTANDARDEXCHANGESTANDARD 4b9405b0-7788-4568-add1-99614e613b694b9405b0-7788-4568-add1-99614e613b69 Mailbox, Outlook on the web, mobile access, anti-malwareMailbox, Outlook on the web, mobile access, anti-malware
Exchange Online Plan 2Exchange Online Plan 2 EXCHANGEENTERPRISEEXCHANGEENTERPRISE 19ec0d23-8335-4cbd-94ac-6050e30712fa19ec0d23-8335-4cbd-94ac-6050e30712fa Plan 1 plus archive, eDiscovery, litigation holdPlan 1 plus archive, eDiscovery, litigation hold
Exchange Online KioskExchange Online Kiosk EXCHANGE_S_DESKLESSEXCHANGE_S_DESKLESS verify-in-tenantverify-in-tenant Kiosk mailbox services for frontline usersKiosk mailbox services for frontline users
SharePoint Online Plan 1SharePoint Online Plan 1 SHAREPOINTSTANDARDSHAREPOINTSTANDARD verify-in-tenantverify-in-tenant SharePoint team sites, OneDrive collaboration basicsSharePoint team sites, OneDrive collaboration basics
SharePoint Online Plan 2SharePoint Online Plan 2 SHAREPOINTENTERPRISESHAREPOINTENTERPRISE verify-in-tenantverify-in-tenant Plan 1 plus advanced compliance and enterprise featuresPlan 1 plus advanced compliance and enterprise features
OneDrive for Business Plan 1OneDrive for Business Plan 1 WACONEDRIVESTANDARDWACONEDRIVESTANDARD verify-in-tenantverify-in-tenant OneDrive storage and syncOneDrive storage and sync
OneDrive for Business Plan 2OneDrive for Business Plan 2 WACONEDRIVEENTERPRISEWACONEDRIVEENTERPRISE verify-in-tenantverify-in-tenant OneDrive with advanced features and complianceOneDrive with advanced features and compliance
Teams EssentialsTeams Essentials TEAMS_ESSENTIALSTEAMS_ESSENTIALS verify-in-tenantverify-in-tenant Standalone Teams meetings and collaborationStandalone Teams meetings and collaboration
Teams EnterpriseTeams Enterprise TEAMS1TEAMS1 verify-in-tenantverify-in-tenant Full Teams workload inside enterprise suitesFull Teams workload inside enterprise suites
Teams Phone StandardTeams Phone Standard MCOEVMCOEV verify-in-tenantverify-in-tenant Phone System for cloud telephonyPhone System for cloud telephony
Audio ConferencingAudio Conferencing MCOMEETADVMCOMEETADV verify-in-tenantverify-in-tenant Dial-in conferencing for Teams meetingsDial-in conferencing for Teams meetings
Teams Rooms ProTeams Rooms Pro MTR_PREMMTR_PREM verify-in-tenantverify-in-tenant Advanced Teams Rooms management and analyticsAdvanced Teams Rooms management and analytics
Power BI FreePower BI Free POWER_BI_STANDARDPOWER_BI_STANDARD verify-in-tenantverify-in-tenant Personal analytics and content consumptionPersonal analytics and content consumption
Power BI ProPower BI Pro POWER_BI_PROPOWER_BI_PRO f8a1db68-be16-40ed-86d5-cb42ce701560f8a1db68-be16-40ed-86d5-cb42ce701560 Shared workspaces, publishing and collaborationShared workspaces, publishing and collaboration
Power BI Premium Per UserPower BI Premium Per User PBI_PREMIUM_PER_USERPBI_PREMIUM_PER_USER verify-in-tenantverify-in-tenant Premium BI capabilities per userPremium BI capabilities per user
Project Plan 1Project Plan 1 PROJECT_PLAN1PROJECT_PLAN1 verify-in-tenantverify-in-tenant Lightweight project web planningLightweight project web planning
Project Plan 3Project Plan 3 PROJECTPROFESSIONALPROJECTPROFESSIONAL verify-in-tenantverify-in-tenant Project desktop and online professional planningProject desktop and online professional planning
Project Plan 5Project Plan 5 PROJECTPREMIUMPROJECTPREMIUM verify-in-tenantverify-in-tenant Portfolio and advanced demand managementPortfolio and advanced demand management
Visio Plan 1Visio Plan 1 VISIOONLINE_PLAN1VISIOONLINE_PLAN1 verify-in-tenantverify-in-tenant Web-based diagrammingWeb-based diagramming
Visio Plan 2Visio Plan 2 VISIOCLIENTVISIOCLIENT verify-in-tenantverify-in-tenant Desktop Visio plus advanced templatesDesktop Visio plus advanced templates
Windows 10/11 Enterprise E3Windows 10/11 Enterprise E3 WIN10_PRO_ENT_SUBWIN10_PRO_ENT_SUB verify-in-tenantverify-in-tenant Enterprise Windows rights and management entitlementsEnterprise Windows rights and management entitlements
Windows 10/11 Enterprise E5Windows 10/11 Enterprise E5 WINDOWS_STOREWINDOWS_STORE verify-in-tenantverify-in-tenant E3 plus Defender and advanced protections via suite bundlingE3 plus Defender and advanced protections via suite bundling
Copilot for Microsoft 365Copilot for Microsoft 365 Microsoft_365_CopilotMicrosoft_365_Copilot verify-in-tenantverify-in-tenant AI assistance across M365 apps; requires eligible base licenseAI assistance across M365 apps; requires eligible base license
Power Apps PremiumPower Apps Premium POWERAPPS_VIRALPOWERAPPS_VIRAL verify-in-tenantverify-in-tenant Premium connectors and Dataverse capabilitiesPremium connectors and Dataverse capabilities
Power Automate PremiumPower Automate Premium FLOW_PREMIUMFLOW_PREMIUM verify-in-tenantverify-in-tenant Premium flows, desktop automation, enterprise connectorsPremium flows, desktop automation, enterprise connectors

Wichtige Service PlansImportant service plans

Service PlanService plan String IDString ID GUIDGUID FunktionCapability
Exchange Online Plan 1Exchange Online Plan 1 EXCHANGE_S_STANDARDEXCHANGE_S_STANDARD 9aaf7827-d63c-4b61-89c3-182f06f82e5c9aaf7827-d63c-4b61-89c3-182f06f82e5c Basis-MailboxdiensteCore mailbox services
Exchange Online Plan 2Exchange Online Plan 2 EXCHANGE_S_ENTERPRISEEXCHANGE_S_ENTERPRISE efb0351d-3b08-4503-993d-383af8de41e3efb0351d-3b08-4503-993d-383af8de41e3 Archiv, Hold, erweiterte Exchange-FunktionenArchive, hold, advanced Exchange features
SharePoint OnlineSharePoint Online SHAREPOINTSTANDARDSHAREPOINTSTANDARD c7699d2e-19aa-44de-8edf-1736da088ca1c7699d2e-19aa-44de-8edf-1736da088ca1 Teamwebsites und DokumenteTeam sites and documents
SharePoint EnterpriseSharePoint Enterprise SHAREPOINTENTERPRISESHAREPOINTENTERPRISE 63038b2c-28d0-45f6-bc36-33062963b49863038b2c-28d0-45f6-bc36-33062963b498 Erweiterte Enterprise-FeaturesAdvanced enterprise features
Microsoft TeamsMicrosoft Teams TEAMS1TEAMS1 57ff2da0-773e-42df-b2af-ffb7a231792957ff2da0-773e-42df-b2af-ffb7a2317929 Chats, Meetings, TeamsChats, meetings, teams
IntuneIntune INTUNE_AINTUNE_A c1ec4a95-1f05-45b3-a911-aa3fa01094f5c1ec4a95-1f05-45b3-a911-aa3fa01094f5 MDM/MAMMDM/MAM
Entra ID P1Entra ID P1 AAD_PREMIUMAAD_PREMIUM 41781fb2-bc02-4b7c-bd55-b576c07bb09d41781fb2-bc02-4b7c-bd55-b576c07bb09d Conditional Access, dynamic groupsConditional access, dynamic groups
Entra ID P2Entra ID P2 AAD_PREMIUM_P2AAD_PREMIUM_P2 eec0eb4f-6444-4f95-aba0-50c24d67f998eec0eb4f-6444-4f95-aba0-50c24d67f998 PIM, Identity ProtectionPIM, Identity Protection
Azure Information Protection P1Azure Information Protection P1 RMS_S_ENTERPRISERMS_S_ENTERPRISE bea4c11e-220a-4e6d-8eb8-8ea15d019f90bea4c11e-220a-4e6d-8eb8-8ea15d019f90 Klassifizierung und SchutzClassification and protection
Azure Information Protection P2Azure Information Protection P2 RMS_S_PREMIUMRMS_S_PREMIUM 6c57d4ab-75ca-47c0-bf53-7d22b6e4f1316c57d4ab-75ca-47c0-bf53-7d22b6e4f131 Erweiterter Schutz und TrackingAdvanced protection and tracking
Power BI ProPower BI Pro BI_AZURE_P2BI_AZURE_P2 70d33638-9c74-4d01-bfd3-562de28bd4ba70d33638-9c74-4d01-bfd3-562de28bd4ba Gemeinsame BI-ArbeitsbereicheShared BI workspaces
Defender for Office 365 P1Defender for Office 365 P1 ATP_ENTERPRISEATP_ENTERPRISE 8a256a2b-b617-496d-b51b-e76466e88db08a256a2b-b617-496d-b51b-e76466e88db0 Safe Links / AttachmentsSafe Links / Attachments
Phone SystemPhone System MCOEVMCOEV 4828c8ec-dc2e-4779-b502-87ac9ce28ab74828c8ec-dc2e-4779-b502-87ac9ce28ab7 Cloud-TelefonieCloud telephony
Audio ConferencingAudio Conferencing MCOMEETADVMCOMEETADV 0c266dff-15dd-4b49-8397-2bb16070ed520c266dff-15dd-4b49-8397-2bb16070ed52 Einwahl in Teams-BesprechungenDial-in for Teams meetings
Project OnlineProject Online PROJECTWORKMANAGEMENTPROJECTWORKMANAGEMENT fafd7243-e5c1-4a3a-9e40-495efcb1d3c3fafd7243-e5c1-4a3a-9e40-495efcb1d3c3 ProjektwebfunktionenProject web capabilities
Office AppsOffice Apps OFFICESUBSCRIPTIONOFFICESUBSCRIPTION 43de0ff5-c92c-492b-9116-175376d08c3843de0ff5-c92c-492b-9116-175376d08c38 Desktop-OfficeDesktop Office
OneDrive for BusinessOneDrive for Business ONEDRIVESTANDARDONEDRIVESTANDARD 13696edf-5a08-49f6-8134-03083ed8ba3013696edf-5a08-49f6-8134-03083ed8ba30 Persönlicher DateispeicherPersonal file storage
PlannerPlanner PROJECT_MADEIRA_PREVIEW_IW_SKUPROJECT_MADEIRA_PREVIEW_IW_SKU verify-in-tenantverify-in-tenant Planner-AufgabenPlanner tasks
FormsForms FORMS_PLAN_E3FORMS_PLAN_E3 2789c901-c14e-48ab-a76a-be334d9d793a2789c901-c14e-48ab-a76a-be334d9d793a Microsoft FormsMicrosoft Forms
StreamStream STREAM_O365_E3STREAM_O365_E3 9e700747-8b1d-45e5-ab8d-ef187ceec1569e700747-8b1d-45e5-ab8d-ef187ceec156 UnternehmensvideoEnterprise video
BookingsBookings MICROSOFTBOOKINGSMICROSOFTBOOKINGS 199a13e2-4d15-4f57-8a0d-0a0b1c6f6a8c199a13e2-4d15-4f57-8a0d-0a0b1c6f6a8c TerminbuchungAppointment booking
WhiteboardWhiteboard WHITEBOARD_PLAN2WHITEBOARD_PLAN2 38b79346-4ecb-4f81-b2f8-7b1f7fe9b9c038b79346-4ecb-4f81-b2f8-7b1f7fe9b9c0 Microsoft WhiteboardMicrosoft Whiteboard
SwaySway SWAYSWAY a23b959c-7ce8-4e57-9140-b90eb88a9e97a23b959c-7ce8-4e57-9140-b90eb88a9e97 Storytelling und PräsentationenStorytelling and presentations
Yammer/Viva EngageYammer/Viva Engage YAMMER_ENTERPRISEYAMMER_ENTERPRISE 7547a3fe-08ee-4ccb-b430-5077c50416537547a3fe-08ee-4ccb-b430-5077c5041653 Community und EngagementCommunity and engagement

Microsoft 365 E3 vs E5Microsoft 365 E3 vs E5

FeatureFeature M365 E3M365 E3 M365 E5M365 E5 KommentarComment
Office Desktop AppsOffice desktop apps EnthaltenIncluded EnthaltenIncluded Desktop-Anwendungen in beiden PaketenDesktop applications in both suites
Exchange Online Plan 2Exchange Online Plan 2 EnthaltenIncluded EnthaltenIncluded Großes Postfach und ArchivLarge mailbox and archive
SharePoint OnlineSharePoint Online EnthaltenIncluded EnthaltenIncluded Zusammenarbeit und IntranetCollaboration and intranet
Teams CoreTeams core EnthaltenIncluded EnthaltenIncluded Meetings, Chat und KollaborationMeetings, chat, and collaboration
Entra ID P1Entra ID P1 EnthaltenIncluded EnthaltenIncluded CA-Basis, Dynamic GroupsCA baseline, dynamic groups
Entra ID P2Entra ID P2 NeinNo EnthaltenIncluded PIM und Identity Protection nur in E5PIM and Identity Protection only in E5
Microsoft Defender for Office 365 P2Microsoft Defender for Office 365 P2 Add-onAdd-on EnthaltenIncluded Erweiterter Mail-SchutzAdvanced mail protection
Microsoft Defender for Endpoint P2Microsoft Defender for Endpoint P2 Add-onAdd-on EnthaltenIncluded Erweiterte EndpunktsicherheitAdvanced endpoint security
Microsoft Defender for IdentityMicrosoft Defender for Identity Add-onAdd-on EnthaltenIncluded Hybrid-Identity-SchutzHybrid identity protection
Microsoft Defender for Cloud AppsMicrosoft Defender for Cloud Apps Add-onAdd-on EnthaltenIncluded CASB und SessionsCASB and sessions
Power BI ProPower BI Pro Add-onAdd-on EnthaltenIncluded Analytics und SharingAnalytics and sharing
Audio ConferencingAudio Conferencing Add-onAdd-on EnthaltenIncluded Einwahl für MeetingsDial-in for meetings
Phone SystemPhone System Add-onAdd-on EnthaltenIncluded Teams-TelefonieTeams telephony
Advanced eDiscoveryAdvanced eDiscovery Add-onAdd-on EnthaltenIncluded Erweiterte UntersuchungAdvanced investigation
Customer KeyCustomer Key Add-onAdd-on EnthaltenIncluded Mandantenkontrollierte VerschlüsselungTenant-controlled encryption
Privileged Identity ManagementPrivileged Identity Management NeinNo EnthaltenIncluded JIT-RollenJIT roles
Identity ProtectionIdentity Protection NeinNo EnthaltenIncluded RisikoerkennungRisk detection
Access ReviewsAccess Reviews Add-onAdd-on EnthaltenIncluded Regelmäßige ZugriffsprüfungenRecurring access reviews
Insider Risk ManagementInsider Risk Management Add-onAdd-on EnthaltenIncluded Insider-Risiko-WorkflowsInsider risk workflows
Microsoft Purview Information Protection Auto-LabelingMicrosoft Purview auto-labeling Add-onAdd-on EnthaltenIncluded Automatische KlassifizierungAutomatic classification
Advanced AuditAdvanced Audit Add-onAdd-on EnthaltenIncluded Längere Audit-AufbewahrungLonger audit retention
Advanced Threat HuntingAdvanced threat hunting Add-onAdd-on EnthaltenIncluded Security-Analysten-WorkflowSecurity analyst workflow

Business Basic vs Standard vs PremiumBusiness Basic vs Standard vs Premium

FeatureFeature BasicBasic StandardStandard PremiumPremium
Web AppsWeb apps EnthaltenIncluded EnthaltenIncluded EnthaltenIncluded
Desktop OfficeDesktop Office NeinNo EnthaltenIncluded EnthaltenIncluded
Exchange OnlineExchange Online EnthaltenIncluded EnthaltenIncluded EnthaltenIncluded
TeamsTeams EnthaltenIncluded EnthaltenIncluded EnthaltenIncluded
SharePoint / OneDriveSharePoint / OneDrive EnthaltenIncluded EnthaltenIncluded EnthaltenIncluded
IntuneIntune NeinNo NeinNo EnthaltenIncluded
Entra ID P1Entra ID P1 NeinNo NeinNo EnthaltenIncluded
Defender for BusinessDefender for Business NeinNo NeinNo EnthaltenIncluded
Conditional AccessConditional Access NeinNo NeinNo EnthaltenIncluded
Geeignet fürBest for Einstieg und reine Cloud-CollaborationEntry level and cloud collaboration SMBs mit Office-DesktopbedarfSMBs needing Office desktop apps SMBs mit Security- und GerätemanagementbedarfSMBs needing security and device management

Entra ID Free vs P1 vs P2Entra ID Free vs P1 vs P2

FeatureFeature FreeFree P1P1 P2P2
SSO für SaaS-AppsSSO for SaaS apps EnthaltenIncluded EnthaltenIncluded EnthaltenIncluded
Self-Service Password ResetSelf-Service Password Reset BegrenztLimited EnthaltenIncluded EnthaltenIncluded
Conditional AccessConditional Access NeinNo EnthaltenIncluded EnthaltenIncluded
Dynamic GroupsDynamic groups NeinNo EnthaltenIncluded EnthaltenIncluded
Group-based LicensingGroup-based licensing NeinNo EnthaltenIncluded EnthaltenIncluded
Hybrid writeback featuresHybrid writeback features NeinNo EnthaltenIncluded EnthaltenIncluded
Application ProxyApplication Proxy NeinNo EnthaltenIncluded EnthaltenIncluded
PIMPIM NeinNo NeinNo EnthaltenIncluded
Identity ProtectionIdentity Protection NeinNo NeinNo EnthaltenIncluded
Access ReviewsAccess Reviews NeinNo NeinNo EnthaltenIncluded
Entitlement ManagementEntitlement Management NeinNo NeinNo EnthaltenIncluded
Lifecycle WorkflowsLifecycle workflows NeinNo BegrenztLimited EnthaltenIncluded
Passwordless / Auth StrengthsPasswordless / auth strengths BegrenztLimited EnthaltenIncluded EnthaltenIncluded
Risk-based CARisk-based CA NeinNo NeinNo EnthaltenIncluded
Administrative UnitsAdministrative units NeinNo EnthaltenIncluded EnthaltenIncluded

EMS E3 vs EMS E5EMS E3 vs EMS E5

FeatureFeature EMS E3EMS E3 EMS E5EMS E5 KommentarComment
Entra ID P1Entra ID P1 EnthaltenIncluded EnthaltenIncluded Basis-IdentitätsschutzBaseline identity protection
Entra ID P2Entra ID P2 NeinNo EnthaltenIncluded PIM und Risiken nur in E5PIM and risk features only in E5
Intune Plan 1Intune Plan 1 EnthaltenIncluded EnthaltenIncluded Geräte- und App-ManagementDevice and app management
Azure Information Protection P1Azure Information Protection P1 EnthaltenIncluded EnthaltenIncluded Klassifizierung und SchutzClassification and protection
Azure Information Protection P2Azure Information Protection P2 NeinNo EnthaltenIncluded Auto-Labeling und TrackingAuto-labeling and tracking
Defender for Cloud AppsDefender for Cloud Apps NeinNo EnthaltenIncluded CASB und Shadow ITCASB and Shadow IT
Identity GovernanceIdentity Governance NeinNo EnthaltenIncluded Access Reviews und Access PackagesAccess reviews and access packages
Identity ProtectionIdentity Protection NeinNo EnthaltenIncluded Risikobasierte ErkennungRisk-based detection

PowerShell und Graph für LizenzierungPowerShell and Graph for licensing

Alle SKUs abrufenGet all SKUs

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku -All |
    Select-Object SkuPartNumber, SkuId, ConsumedUnits, @{N="Enabled";E={$_.PrepaidUnits.Enabled}}, @{N="Warning";E={$_.PrepaidUnits.Warning}}, @{N="Suspended";E={$_.PrepaidUnits.Suspended}} |
    Sort-Object SkuPartNumber

Lizenz zuweisenAssign license

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "User.ReadWrite.All","Organization.Read.All"
$sku = Get-MgSubscribedSku -All | Where-Object SkuPartNumber -eq "SPE_E3"
$body = @{
    addLicenses = @(@{ skuId = $sku.SkuId })
    removeLicenses = @()
}
Set-MgUserLicense -UserId "user@contoso.com" -BodyParameter $body

Lizenz entfernenRemove license

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "User.ReadWrite.All","Organization.Read.All"
$sku = Get-MgSubscribedSku -All | Where-Object SkuPartNumber -eq "SPE_E3"
$body = @{
    addLicenses = @()
    removeLicenses = @($sku.SkuId)
}
Set-MgUserLicense -UserId "user@contoso.com" -BodyParameter $body

Service Plans deaktivierenDisable service plans

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "User.ReadWrite.All","Organization.Read.All"
$sku = Get-MgSubscribedSku -All | Where-Object SkuPartNumber -eq "SPE_E3"
$disabledPlans = @(
    ($sku.ServicePlans | Where-Object ServicePlanName -eq "TEAMS1").ServicePlanId,
    ($sku.ServicePlans | Where-Object ServicePlanName -eq "WHITEBOARD_PLAN2").ServicePlanId
)
$body = @{
    addLicenses = @(@{ skuId = $sku.SkuId; disabledPlans = $disabledPlans })
    removeLicenses = @()
}
Set-MgUserLicense -UserId "user@contoso.com" -BodyParameter $body

Gruppenbasierte LizenzierungGroup-based licensing

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "Group.ReadWrite.All","Organization.Read.All"
$groupId = "11111111-1111-1111-1111-111111111111"
$sku = Get-MgSubscribedSku -All | Where-Object SkuPartNumber -eq "SPE_E3"
$body = @{
    addLicenses = @(@{ skuId = $sku.SkuId; disabledPlans = @() })
    removeLicenses = @()
}
Set-MgGroupLicense -GroupId $groupId -BodyParameter $body

Lizenzauslastung berichtenCreate license usage report

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "Organization.Read.All"
$report = Get-MgSubscribedSku -All | ForEach-Object {
    [pscustomobject]@{
        SkuPartNumber = $_.SkuPartNumber
        SkuId         = $_.SkuId
        Enabled       = $_.PrepaidUnits.Enabled
        Warning       = $_.PrepaidUnits.Warning
        Consumed      = $_.ConsumedUnits
        Available     = $_.PrepaidUnits.Enabled - $_.ConsumedUnits
    }
}
$report | Export-Csv .\license-usage.csv -NoTypeInformation -Encoding UTF8

Nicht lizenzierte Benutzer findenFind unlicensed users

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -All -Property "displayName,userPrincipalName,assignedLicenses" |
    Where-Object { $_.AssignedLicenses.Count -eq 0 } |
    Select-Object DisplayName, UserPrincipalName |
    Export-Csv .\unlicensed-users.csv -NoTypeInformation -Encoding UTF8

Benutzer mit bestimmter SKU findenFind users with a specific SKU

Die folgenden Snippets decken die typischen Betriebsaufgaben für SKU- und Service-Plan-Verwaltung ab.The following snippets cover the most common operational tasks for SKU and service plan administration.

PowerShellPowerShell

Connect-MgGraph -Scopes "User.Read.All","Organization.Read.All"
$sku = Get-MgSubscribedSku -All | Where-Object SkuPartNumber -eq "SPE_E3"
Get-MgUser -All -Property "displayName,userPrincipalName,assignedLicenses" |
    Where-Object { $_.AssignedLicenses.SkuId -contains $sku.SkuId } |
    Select-Object DisplayName, UserPrincipalName |
    Export-Csv .\users-with-spe-e3.csv -NoTypeInformation -Encoding UTF8