Which Microsoft licence do you need for AlertControl?
For AlertControl your Microsoft 365 tenant needs at least one user with Microsoft Entra ID P1. That licence is included in, among others, Microsoft 365 Business Premium, E3 and E5. Without Entra ID P1, Microsoft does not release the sign-ins and part of the security data. The dashboard then tells you which parts are missing.
Updated 30 October 2026
| Part of AlertControl | What Microsoft requires |
|---|---|
| Sign-ins | Microsoft Entra ID P1 |
| Users & MFA and the last sign-in per user | Microsoft Entra ID P1 |
| Identity risk detections and risky users | Microsoft Entra ID P2, for example in Microsoft 365 E5 |
| Security alerts and security incidents | Alerts from the Microsoft Defender services included in your licence |
| DLP alerts | Active DLP policies in Microsoft Purview, for example with Business Premium, E3 or E5 |
| Entra ID audit log, events (unified audit log) and Secure Score | No extra licence; the unified audit log must be turned on |
Which licences include Entra ID P1?
• Microsoft 365 Business Premium: Entra ID P1.
• Microsoft 365 E3: Entra ID P1.
• Microsoft 365 E5: Entra ID P2, which also includes everything in P1.
• Standalone licence Microsoft Entra ID P1 or P2, alongside your current subscription.
Microsoft 365 Business Basic and Business Standard do not include Entra ID P1.
How many licences do you need?
Microsoft releases the logs as soon as at least one user in the tenant has the licence. Which users you need to license under Microsoft's licensing terms depends on how you use the features. If in doubt, check with your Microsoft partner.
How long does Microsoft keep the data?
With Entra ID P1 or P2, Microsoft keeps sign-ins and the Entra ID audit log for 30 days. Events from the unified audit log can be fetched through the API up to 7 days back. AlertControl does not store the logs itself.
How do you check which licence you have?
In the Microsoft 365 admin center you see your subscriptions under Billing > Your products. Or sign in to AlertControl: the dashboard tells you which parts are unavailable because of a missing licence.
Frequently asked questions
Partly. Business Standard does not include Entra ID P1, so sign-ins, MFA details and part of the security alerts stay empty. The audit log, events and Secure Score do work. With one Entra ID P1 licence or a move to Business Premium, the rest becomes available.
Only for identity risk detections and risky users from Entra ID Protection. All other parts work with Entra ID P1.
Microsoft then refuses the request. The dashboard shows for those tables that the licence does not allow it. If all security tables are blocked, the dashboard tells you that at least one user needs Business Premium or Entra ID P1.
No. You can connect AlertControl and see what already works. The dashboard shows which parts are missing because of the licence.
See for yourself what is happening in your Microsoft 365?
Try AlertControl free for 30 days. You sign in with your Microsoft account and grant read-only consent once.