You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/defender-endpoint-subscription-settings.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,19 +28,16 @@ In Defender for Endpoint, a mixed-licensing scenario is a situation in which an
28
28
|*Mixed trial*| Try a premium level subscription for some users. Examples include: <br/>- Defender for Endpoint Plan 1 (purchased for all users), and Defender for Endpoint Plan 2 (a trial subscription has been started for some users)<br/>- Microsoft 365 E3 (purchased for all users), and Microsoft 365 E5 (a trial subscription has been started for some users) |
29
29
|*Phased upgrades*| Upgrade user licenses in phases. Examples include:<br/>- Moving groups of users from Defender for Endpoint Plan 1 to Plan 2<br/>- Moving groups of users from Microsoft 365 E3 to E5 |
30
30
31
-
Until recently, mixed-licensing scenarios weren't supported; in cases of multiple subscriptions, the highest functional subscription would take precedence for your tenant. Now, you can manage your subscription settings to accommodate mixed licensing scenarios across client devices. These capabilities enable you to:
31
+
You can manage your subscription settings to accommodate mixed licensing scenarios across client devices. These capabilities enable you to:
32
32
33
33
-**Set your tenant to mixed mode and tag devices** to determine which client devices will receive features and capabilities from each plan (we call this option *mixed mode*); **OR**,
34
34
-**Use the features and capabilities from one plan across all your client devices**.
35
35
36
36
You can also use a newly added license usage report to track status.
37
37
38
-
> [!NOTE]
39
-
> If you're using Microsoft Defender for Business and you want to switch to Defender for Endpoint Plan 2, contact support. For more information, see [Change your endpoint security subscription](/defender-business/mdb-manage-subscription).
40
-
41
38
## [**Use mixed mode**](#tab/mixed)
42
39
43
-
## Set your tenant to mixed mode and tag devices
40
+
To set your tenant to mixed mode and tag devices, follow the guidance on this tab.
44
41
45
42
> [!IMPORTANT]
46
43
> -**Mixed-mode settings apply to client endpoints only**. Tagging server devices won't change their subscription state. All server devices running Windows Server or Linux should have appropriate licenses, such as [Defender for Servers](/azure/defender-for-cloud/plan-defender-for-servers-select-plan). See [Options for onboarding servers](onboard-windows-server.md).
@@ -96,10 +93,9 @@ For example, suppose that you want to use a tag called `VIP` for all the devices
96
93
97
94
2. Set up a dynamic rule using the condition operator `Tag Does not contain VIP`. In this case, all devices that do not have the `VIP` tag will receive the `License MDE P1` tag and Defender for Endpoint Plan 1 capabilities.
98
95
99
-
100
96
## [**Use one plan**](#tab/oneplan)
101
97
102
-
## Use the features and capabilities from one plan across all your devices
98
+
To use the features and capabilities from one plan across all your devices, follow the guidance on this tab.
103
99
104
100
> [!IMPORTANT]
105
101
> To access license information, you must have one of the following roles assigned in Microsoft Entra ID:
@@ -123,6 +119,10 @@ For example, suppose that you want to use a tag called `VIP` for all the devices
123
119
124
120
---
125
121
122
+
Microsoft Defender for Business isn't supported for mixed-license scenarios. If you're using Defender for Business and you want to switch to Defender for Endpoint Plan 2, contact support. For more information, see [Change your endpoint security subscription](/defender-business/mdb-manage-subscription).
> Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
0 commit comments