azureblog.co.uk
← cd ~/licences
// licences · sku

MDE_SMBMicrosoft Defender for Business

MDE_SMB is the SKU part number Microsoft uses for Microsoft Defender for Business. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.

Product nameMicrosoft Defender for Business
String ID (SkuPartNumber)MDE_SMB
GUID (SkuId)5e1e7702-a2b7-4360-8d07-2f515792896f
Service plans4

Service plans included (4)

Service planNameID
Intune_DefenderMDE_SecurityManagement1689aade-3d6a-4bfc-b017-46d2672df5ad
M365_LIGHTHOUSE_CUSTOMER_PLAN1Microsoft 365 Lighthouse (Plan 1)6f23d6a9-adbf-481c-8538-b4c095654487
M365_LIGHTHOUSE_PARTNER_PLAN1Microsoft 365 Lighthouse (Plan 2)d55411c9-cfff-40a9-87c7-240f14df7da5
MDE_SMBMicrosoft Defender for Businessbfc1bbd9-981b-4f71-9b82-17c35fd0e2a4

Is it in your tenant?

powershell3 lines
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "MDE_SMB" |
    Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }

Assign it to a user

For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.

powershell3 lines
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
    -AddLicenses @{ SkuId = "5e1e7702-a2b7-4360-8d07-2f515792896f" } -RemoveLicenses @()

Who has it?

powershell4 lines
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq 5e1e7702-a2b7-4360-8d07-2f515792896f)" `
    -ConsistencyLevel eventual -CountVariable n -All |
    Select-Object DisplayName, UserPrincipalName

Similar licences

These share the most service plans with MDE_SMB.

Search all 620 SKUs →

Sources