azureblog.co.uk
← cd ~/licences
// licences · sku

SPE_F5_SECMicrosoft 365 F5 Security Add-on

SPE_F5_SEC is the SKU part number Microsoft uses for Microsoft 365 F5 Security Add-on. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.

Product nameMicrosoft 365 F5 Security Add-on
String ID (SkuPartNumber)SPE_F5_SEC
GUID (SkuId)67ffe999-d9ca-49e1-9d2c-03fb28aa7a48
Service plans7

Service plans included (7)

Service planNameID
MTPMicrosoft 365 Defenderbf28f719-7844-4079-9c78-c1307898e192
ATP_ENTERPRISEMicrosoft Defender for Office 365 (Plan 1)f20fedf3-f3c3-43c3-8267-2bfdd51c0939
THREAT_INTELLIGENCEMicrosoft Defender for Office 365 (Plan 2)8e0c0a52-6a6c-4d40-8370-dd62790dcd70
WINDEFATPMicrosoft Defender for Endpoint871d91ec-ec1a-452b-a83f-bd76c7d770ef
AAD_PREMIUM_P2Microsoft Entra ID P2eec0eb4f-6444-4f95-aba0-50c24d67f998
ADALLOM_S_STANDALONEMicrosoft Defender for Cloud Apps2e2ddb96-6af9-4b1d-a3f0-d6ecfd22edb2
ATAMicrosoft Defender for Identity14ab5db5-e6c4-4b20-b4bc-13e36fd2227f

Is it in your tenant?

powershell3 lines
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "SPE_F5_SEC" |
    Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }

Assign it to a user

For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.

powershell3 lines
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
    -AddLicenses @{ SkuId = "67ffe999-d9ca-49e1-9d2c-03fb28aa7a48" } -RemoveLicenses @()

Who has it?

powershell4 lines
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq 67ffe999-d9ca-49e1-9d2c-03fb28aa7a48)" `
    -ConsistencyLevel eventual -CountVariable n -All |
    Select-Object DisplayName, UserPrincipalName

Similar licences

These share the most service plans with SPE_F5_SEC.

Search all 620 SKUs →