azureblog.co.uk
← cd ~/licences
// licences · sku

Microsoft_Entra_Suite_Step_Up_for_Microsoft_Entra_ID_P2Microsoft Entra Suite Add-on for Microsoft Entra ID P2

Microsoft_Entra_Suite_Step_Up_for_Microsoft_Entra_ID_P2 is the SKU part number Microsoft uses for Microsoft Entra Suite Add-on for Microsoft Entra ID P2. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.

Product nameMicrosoft Entra Suite Add-on for Microsoft Entra ID P2
String ID (SkuPartNumber)Microsoft_Entra_Suite_Step_Up_for_Microsoft_Entra_ID_P2
GUID (SkuId)2ef3064c-c95c-426c-96dd-9ffeaa2f2c37
Service plans4

Service plans included (4)

Service planNameID
Entra_Premium_Internet_AccessMicrosoft Entra Internet Access8d23cb83-ab07-418f-8517-d7aca77307dc
Entra_Premium_Private_AccessMicrosoft Entra Private Accessf057aab1-b184-49b2-85c0-881b02a405c5
Verifiable_Credentials_Service_RequestVerifiable Credentials Service Requestaae826b7-14cd-4691-8178-2b312f7072ea
Entra_Identity_GovernanceEntra Identity Governancee866a266-3cff-43a3-acca-0c90a7e00c8b

Is it in your tenant?

powershell3 lines
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "Microsoft_Entra_Suite_Step_Up_for_Microsoft_Entra_ID_P2" |
    Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }

Assign it to a user

For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.

powershell3 lines
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
    -AddLicenses @{ SkuId = "2ef3064c-c95c-426c-96dd-9ffeaa2f2c37" } -RemoveLicenses @()

Who has it?

powershell4 lines
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq 2ef3064c-c95c-426c-96dd-9ffeaa2f2c37)" `
    -ConsistencyLevel eventual -CountVariable n -All |
    Select-Object DisplayName, UserPrincipalName

Search all 620 SKUs →

Sources