azureblog.co.uk
← cd ~/licences
// licences · sku

AAD_PREMIUM_P2Microsoft Entra ID P2

AAD_PREMIUM_P2 is the SKU part number Microsoft uses for Microsoft Entra ID P2. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.

Product nameMicrosoft Entra ID P2
String ID (SkuPartNumber)AAD_PREMIUM_P2
GUID (SkuId)84a661c4-e949-4bd2-a560-ed7766fcaf2b
Service plans5

Service plans included (5)

Service planNameID
AAD_PREMIUMMicrosoft Entra ID P141781fb2-bc02-4b7c-bd55-b576c07bb09d
AAD_PREMIUM_P2Microsoft Entra ID P2eec0eb4f-6444-4f95-aba0-50c24d67f998
ADALLOM_S_DISCOVERYCLOUD APP SECURITY DISCOVERY932ad362-64a8-4783-9106-97849a1a30b9
EXCHANGE_S_FOUNDATIONEXCHANGE FOUNDATION113feb6c-3fe4-4440-bddc-54d774bf0318
MFA_PREMIUMMICROSOFT AZURE MULTI-FACTOR AUTHENTICATION8a256a2b-b617-496d-b51b-e76466e88db0

Is it in your tenant?

powershell3 lines
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "AAD_PREMIUM_P2" |
    Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }

Assign it to a user

For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.

powershell3 lines
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
    -AddLicenses @{ SkuId = "84a661c4-e949-4bd2-a560-ed7766fcaf2b" } -RemoveLicenses @()

Who has it?

powershell4 lines
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq 84a661c4-e949-4bd2-a560-ed7766fcaf2b)" `
    -ConsistencyLevel eventual -CountVariable n -All |
    Select-Object DisplayName, UserPrincipalName

Similar licences

These share the most service plans with AAD_PREMIUM_P2.

Search all 620 SKUs →