Summary
Running ZTA v2.1.0 against a tenant without Entra ID P2 produces noisy console errors that are difficult to interpret and don't clearly distinguish between licensing gaps, permission issues, or script bugs. The assessment completes and generates a report, but the error output creates unnecessary confusion. The following improvements would significantly improve the experience.
When P2-dependent checks are skipped, the generated HTML report shows blank or empty sections for PIM and Identity Protection with no indication of why. Reviewers unfamiliar with licensing requirements may interpret these as misconfigurations or assessment failures.
Suggested fix: Inject a visible notice in the report for skipped sections, e.g.:
ℹ️ This check requires Entra ID P2 or Governance licensing.
Not assessed — license not detected in this tenant.
Environment
ZeroTrustAssessment version: 2.1.0
PowerShell version: 7.5.4
Tenant licensing: No Entra ID P2