Microsoft Entra ID P2 (Non-Profit Pricing) — Pricing, Plans & What's Included

Microsoft Entra ID P2 is a standalone per-user identity security plan for eligible charity tenants, because it adds advanced identity protection, privileged access controls, and access review workflows without requiring a full Microsoft 365 E5 suite. It is best suited for nonprofits that need stronger sign-in security, risk-based access decisions, and better control over administrator privileges.

Microsoft Entra ID P2 includes Entra ID P1 capabilities plus advanced P2 identity security features, because P2 is the higher standalone Entra ID plan. Key capabilities include Conditional Access foundations, Microsoft Entra ID Protection for risky users and risky sign-ins, Privileged Identity Management, and Access Reviews for reviewing group, application, and privileged role access.

Microsoft Entra ID P2 does not include Microsoft 365 desktop apps, Exchange mailboxes, Teams Phone, Intune, Microsoft Defender products, Microsoft Sentinel, or broader SIEM/SOAR tooling, because it is a standalone identity licensing plan rather than a productivity, endpoint management, or security suite. If your charity needs email, Office apps, endpoint management, or Defender coverage, compare P2 with a broader Microsoft 365 bundle before buying.

Users who benefit from or are covered by Entra ID P2 capabilities may need appropriate P2 licensing, because Microsoft licenses these advanced identity features on a per-user basis. Confirm the scope before applying risk-based policies, access reviews, or privileged access controls broadly across staff, volunteers, admins, and guests.

The listed Charity offer is paid nonprofit pricing, because the source listing does not identify a nonprofit grant or trial for Microsoft Entra ID P2. If your organization has a separate Microsoft nonprofit agreement or grant eligibility, confirm it with IT Partner before purchase rather than assuming this SKU is free.

For Charity tenants, Microsoft Entra ID P2 is available as monthly commitment paid monthly, annual commitment paid annually, or annual commitment paid monthly, because those are the terms listed for the nonprofit-priced SKU. Annual upfront normally gives the best per-seat rate in the listed options, while monthly commitment provides the most flexibility.

You can generally add seats during the subscription term, because CSP subscriptions support seat increases as needs grow. Reductions and cancellations are more restricted, especially on annual commitments, so confirm the current New Commerce cancellation window and seat-change rules with IT Partner before ordering.

No, Microsoft Entra ID P2 does not include Teams, Exchange Online mailboxes, OneDrive storage, SharePoint, or Microsoft 365 desktop apps, because it is an identity and access security plan. A charity that needs productivity workloads should license those separately or choose a Microsoft 365 nonprofit plan that includes them.

No, Microsoft Entra ID P2 does not include Microsoft 365 Copilot and does not by itself replace the qualifying Microsoft 365 base license needed for Copilot, because P2 is an identity security add-on. It can help secure access to Microsoft 365 and Copilot experiences through stronger identity controls, but Copilot licensing and prerequisites must be confirmed separately.

Yes, you may still need Intune, Microsoft Defender, or Microsoft Sentinel depending on your security goals, because Entra ID P2 focuses on identity risk, privileged access, and access governance rather than endpoint management, endpoint/server protection, XDR, or SIEM. Many nonprofits use Entra ID P2 alongside those products, but they are not included in this standalone SKU.

Entra ID P2 adds risk-based identity protection and privileged access governance, because it includes P2 capabilities such as risky user and risky sign-in detection, risk-based responses, Privileged Identity Management, and Access Reviews. This helps a nonprofit reduce account takeover risk and limit standing administrator access.

Yes, Entra ID P2 can support risk-based access decisions, because it includes Microsoft Entra ID Protection capabilities associated with detecting risky users and risky sign-ins. Licensing should be confirmed for all users covered by those policies, especially if the nonprofit applies risk-based controls broadly to employees, volunteers, or external collaborators.

Yes, Microsoft Entra ID P2 includes Privileged Identity Management, because PIM is one of the core P2 capabilities used to reduce standing administrator access. Nonprofits can use it for just-in-time role activation, approval workflows, and better oversight of privileged roles, subject to proper licensing and configuration.

Yes, Entra ID P2 includes Access Reviews, because P2 is designed to help organizations periodically review access to groups, applications, and privileged roles. This is useful for nonprofits with staff turnover, volunteers, seasonal workers, board members, and external partners who should not keep access indefinitely.

No, Charity pricing is not the same as Government GCC or GCC High, because those are separate Microsoft cloud and eligibility paths for qualifying government and regulated organizations. A nonprofit should not assume GCC or GCC High residency, compliance boundaries, or purchasing rules apply to this Charity SKU; confirm government cloud requirements with IT Partner if your organization has public-sector or regulated-contract obligations.

Not automatically, because Education licensing depends on Microsoft education eligibility and user classification rules, while this offer is specifically the Charity segment. If your nonprofit operates a school or has students, faculty, staff, and volunteers, confirm whether Charity, Education, or a mixed licensing approach is allowed before assigning licenses.

If your tenant is not approved for nonprofit eligibility, you should not buy the Charity-priced Entra ID P2 SKU, because Charity pricing requires nonprofit eligibility in the Microsoft tenant. In that case, use the Commercial Entra ID P2 path or resolve nonprofit verification before purchase.

Start by assigning P2 licenses to the intended users and piloting policies in a controlled group, because Conditional Access, identity risk policies, PIM, and access reviews can affect sign-in and administrator workflows. A phased rollout with break-glass admin accounts, report-only testing where available, and clear user communication reduces the risk of lockouts.

Yes, Entra ID P2 can be used in hybrid identity environments, because many organizations synchronize on-premises Active Directory identities to Microsoft Entra ID and then apply cloud identity controls. The exact architecture, synchronization tool, and licensing scope should be confirmed before rollout, especially if your nonprofit has legacy applications or multiple directories.

Yes, CSP management can usually be moved without user downtime, because the Microsoft tenant, identities, and cloud service configuration remain in place while the partner relationship or subscription management changes. For an equivalent Microsoft nonprofit SKU and term, the Microsoft-set price should be the same apart from taxes, promotions, or partner-added services; confirm the transfer path and timing with IT Partner.