Adds adaptive, risk-based security on top of Entra ID P1. Includes Identity Protection with machine-learning-driven sign-in and user risk detection, Privileged Identity Management (PIM) for just-in-time privileged access, and access reviews — suited to organisations needing more proactive, automated identity threat response. Included in Microsoft 365 E5.