Skip to content

Commit cb359e7

Browse files
committed
Update defender-endpoint-subscription-settings.md
1 parent cf43956 commit cb359e7

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

defender-endpoint/defender-endpoint-subscription-settings.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -28,19 +28,16 @@ In Defender for Endpoint, a mixed-licensing scenario is a situation in which an
2828
| *Mixed trial* | Try a premium level subscription for some users. Examples include: <br/>- Defender for Endpoint Plan 1 (purchased for all users), and Defender for Endpoint Plan 2 (a trial subscription has been started for some users)<br/>- Microsoft 365 E3 (purchased for all users), and Microsoft 365 E5 (a trial subscription has been started for some users) |
2929
| *Phased upgrades* | Upgrade user licenses in phases. Examples include:<br/>- Moving groups of users from Defender for Endpoint Plan 1 to Plan 2<br/>- Moving groups of users from Microsoft 365 E3 to E5 |
3030

31-
Until recently, mixed-licensing scenarios weren't supported; in cases of multiple subscriptions, the highest functional subscription would take precedence for your tenant. Now, you can manage your subscription settings to accommodate mixed licensing scenarios across client devices. These capabilities enable you to:
31+
You can manage your subscription settings to accommodate mixed licensing scenarios across client devices. These capabilities enable you to:
3232

3333
- **Set your tenant to mixed mode and tag devices** to determine which client devices will receive features and capabilities from each plan (we call this option *mixed mode*); **OR**,
3434
- **Use the features and capabilities from one plan across all your client devices**.
3535

3636
You can also use a newly added license usage report to track status.
3737

38-
> [!NOTE]
39-
> If you're using Microsoft Defender for Business and you want to switch to Defender for Endpoint Plan 2, contact support. For more information, see [Change your endpoint security subscription](/defender-business/mdb-manage-subscription).
40-
4138
## [**Use mixed mode**](#tab/mixed)
4239

43-
## Set your tenant to mixed mode and tag devices
40+
To set your tenant to mixed mode and tag devices, follow the guidance on this tab.
4441

4542
> [!IMPORTANT]
4643
> - **Mixed-mode settings apply to client endpoints only**. Tagging server devices won't change their subscription state. All server devices running Windows Server or Linux should have appropriate licenses, such as [Defender for Servers](/azure/defender-for-cloud/plan-defender-for-servers-select-plan). See [Options for onboarding servers](onboard-windows-server.md).
@@ -96,10 +93,9 @@ For example, suppose that you want to use a tag called `VIP` for all the devices
9693

9794
2. Set up a dynamic rule using the condition operator `Tag Does not contain VIP`. In this case, all devices that do not have the `VIP` tag will receive the `License MDE P1` tag and Defender for Endpoint Plan 1 capabilities.
9895

99-
10096
## [**Use one plan**](#tab/oneplan)
10197

102-
## Use the features and capabilities from one plan across all your devices
98+
To use the features and capabilities from one plan across all your devices, follow the guidance on this tab.
10399

104100
> [!IMPORTANT]
105101
> To access license information, you must have one of the following roles assigned in Microsoft Entra ID:
@@ -123,6 +119,10 @@ For example, suppose that you want to use a tag called `VIP` for all the devices
123119

124120
---
125121

122+
Microsoft Defender for Business isn't supported for mixed-license scenarios. If you're using Defender for Business and you want to switch to Defender for Endpoint Plan 2, contact support. For more information, see [Change your endpoint security subscription](/defender-business/mdb-manage-subscription).
123+
124+
[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
125+
126126
> [!IMPORTANT]
127127
> Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
128128

0 commit comments

Comments
 (0)