← cd ~/licences
// licences · sku
THREAT_INTELLIGENCE_GOVMicrosoft Defender for Office 365 (Plan 2) GCC
THREAT_INTELLIGENCE_GOV is the SKU part number Microsoft uses for Microsoft Defender for Office 365 (Plan 2) GCC. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.
| Product name | Microsoft Defender for Office 365 (Plan 2) GCC |
|---|---|
| String ID (SkuPartNumber) | THREAT_INTELLIGENCE_GOV |
| GUID (SkuId) | 56a59ffb-9df1-421b-9e61-8b568583474d |
| Service plans | 3 |
Service plans included (3)
| Service plan | Name | ID |
|---|---|---|
MTP | Microsoft 365 Defender | bf28f719-7844-4079-9c78-c1307898e192 |
ATP_ENTERPRISE_GOV | Microsoft Defender for Office 365 (Plan 1) for Government | 493ff600-6a2b-4db6-ad37-a7d4eb214516 |
THREAT_INTELLIGENCE_GOV | Microsoft Defender for Office 365 (Plan 2) for Government | 900018f1-0cdb-4ecb-94d4-90281760fdc6 |
Is it in your tenant?
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "THREAT_INTELLIGENCE_GOV" |
Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }Assign it to a user
For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
-AddLicenses @{ SkuId = "56a59ffb-9df1-421b-9e61-8b568583474d" } -RemoveLicenses @()Who has it?
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq 56a59ffb-9df1-421b-9e61-8b568583474d)" `
-ConsistencyLevel eventual -CountVariable n -All |
Select-Object DisplayName, UserPrincipalNameSimilar licences
These share the most service plans with THREAT_INTELLIGENCE_GOV.
ATP_ENTERPRISE_GOVMicrosoft Defender for Office 365 (Plan 1) GCC · 33% overlap