No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID Protection vs Microsoft Entra Permissions Management [EOL] comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Identity Management (IM) (9th), Microsoft Security Suite (10th), Identity Threat Detection and Response (ITDR) (2nd)
Microsoft Entra Permissions...
Average Rating
7.0
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

MohammedTalukdar1 - PeerSpot reviewer
Enterprise Security Architect at PRS for Music
Identity protection has unified access control and delivers faster, risk-based threat response
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive. Occasionally, when we are trying to do something different in terms of integrating into a new vendor or platform, especially with some of the new SaaS platforms, there are not many out-of-the-box solutions available, so we have to build custom solutions.
Sameer Bhat - PeerSpot reviewer
Vice President at Goldman Sachs
Provides resource-based access and security, but time-bound access can be a problem
Entra ID is the core of the identity management that we have. This is the key product that we are using. I am currently also looking into Entra Private Access because we are planning to deploy about 50,000 desktops into Azure and use Azure Virtual Desktop. We would like to give access to the users from the desktop to on-premises applications. I learned that Entra Private Access is a good solution. That is not yet GA, but that is what we are looking for. Entra provides a single pane of glass for managing user access, but because our company also integrates with Nebula API, only administrators use Entra's pane. A normal person who wants to get onboarded can do self-service using Nebula. The features for whitelisting and other things are definitely there. That is what we use specifically. Application IDs, enterprise applications, and all those things are already there, so we have more efficiency. There is also security because we usually do not allow user identities to get direct access to Azure resources. Usually, we use the service principles from Entra ID, so this way, it increases security. Entra has helped to save time for our IT administrators. We tend to automate a lot of things. We can do automation using Graph APIs and save time. It is hard to quantify the time savings, but there has been a medium amount of time savings. Entra has helped to save our organization money. We care about security and risk more than money, but it also saves money. We are premium customers, and because we have a commit-to-consume contract with Microsoft of multi-million dollars, the money does not come into it because we have to consume those resources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"For me, automatization is most valuable."
"The valuable features include multifactor authentication, accessory capabilities, and conditional access for specific applications."
"I use conditional access most of the time."
"Microsoft's support is commendable. Their response time is quick, and they handle inquiries effectively, ensuring ongoing support processes."
"The multifactor authentication feature is effective, providing an additional layer of security."
"The value is significantly beneficial."
"The primary and most valuable aspect of Azure AD identity is its ability to function seamlessly on both on-premise and cloud infrastructure, eliminating the need for extensive updates. However, this dual solution can pose vulnerabilities that require substantial support and security measures in the on-premise environment. Despite the challenges, it is currently not feasible to completely abandon AD, especially for companies in the sales and energy sectors. The integration with Microsoft Defender is crucial for enhancing security, making identity and security the primary focus and purpose of Azure AD."
"The solution helps us with authentication."
"Multifactor authentication is valuable."
"The solution integrates well with our infrastructure and other systems without any issues."
 

Cons

"Azure AD could improve by enhancing the availability of specialized courses for security, such as NETSCOUT security or other relevant certifications. It would be beneficial to have specific courses for security, to provide in-depth knowledge and skills related to Azure AD. While there are micro-learning resources available for various concepts, many people in the IT industry may not have the time to go through all the courses to properly configure and utilize Azure Active Directory. Simplifying the implementation process and making it easier for individuals to join a company with Azure AD could also be considered areas for improvement."
"The pricing could be improved."
"I rate the quality of support at four out of ten because of inefficiencies in the ticket handling process. Tickets often bounce from person to person, requiring the sharing of information multiple times."
"A potential area of improvement in Microsoft Entra ID Protection could include backup-level capability or snapshot capability."
"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."
"The experience is not very smooth for the user. This is an area where Microsoft could improve the authorization process."
"The recent CrowdStrike issue affected most systems."
"I did have some trouble finding specific documentation, particularly for troubleshooting."
"We use a third-party API called Nebula API to integrate the account for authorization. The time-bound access area in Entra can be a problem. It can be improved in terms of the granularity of the permissions."
"The solution's pricing and support services need improvement."
 

Pricing and Cost Advice

"The price of Azure AD is not expensive."
"The product cost is on the expensive side."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"Azure Active Directory Identity Protection is not very expensive."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"We are a Fortune 500 company, so we always negotiate with Microsoft."
"The product cost is in the mid to high range."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
10%
Outsourcing Company
9%
Construction Company
8%
Computer Software Company
20%
Financial Services Firm
17%
Outsourcing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise5
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive.
What needs improvement with Azure Active Directory Identity Protection?
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. T...
What is your primary use case for Azure Active Directory Identity Protection?
I primarily use Microsoft Entra ID Protection as an Identity and Access Management platform. The primary use case for Microsoft Entra ID Protection is Identity Management, although there are numero...
Ask a question
Earn 20 points
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
CloudKnox Permissions Management
 

Overview

Find out what your peers are saying about Microsoft and others in Microsoft Security Suite. Updated: October 2026.
917,433 professionals have used our research since 2012.