No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID Protection vs Microsoft Entra Permissions Management [EOL] comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
21
Ranking in other categories
Identity Management (IM) (7th), Microsoft Security Suite (8th), Identity Threat Detection and Response (ITDR) (2nd)
Microsoft Entra Permissions...
Average Rating
7.0
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Luis Gabriel Mieles Benavides - PeerSpot reviewer
Cloud Architect at Sonda S.A.
Identity protection has strengthened daily access control and improved passwordless security
The best features of Microsoft Entra ID Protection include the password dictionary, which we do not have in Active Directory. Conditional access is excellent because we can select the location from which users authenticate, and this is the best feature for me. Another valuable feature is the ability to identify critical or suspicious computers. If computers are too old or too suspicious, the system does not allow authentication, which is excellent. The effectiveness of automated remediation for handling identity threats is great. I use passwordless authentication with cellular phone authentication, which is excellent because we do not always need a password. Microsoft Entra ID Protection is a great solution overall because it improves security in the company through identity management. It improves integration with other solutions such as Google, Gmail, Hotmail, Outlook, and Facebook. We can create different applications and integrate with different services.
Sameer Bhat - PeerSpot reviewer
Vice President at Goldman Sachs
Provides resource-based access and security, but time-bound access can be a problem
Entra ID is the core of the identity management that we have. This is the key product that we are using. I am currently also looking into Entra Private Access because we are planning to deploy about 50,000 desktops into Azure and use Azure Virtual Desktop. We would like to give access to the users from the desktop to on-premises applications. I learned that Entra Private Access is a good solution. That is not yet GA, but that is what we are looking for. Entra provides a single pane of glass for managing user access, but because our company also integrates with Nebula API, only administrators use Entra's pane. A normal person who wants to get onboarded can do self-service using Nebula. The features for whitelisting and other things are definitely there. That is what we use specifically. Application IDs, enterprise applications, and all those things are already there, so we have more efficiency. There is also security because we usually do not allow user identities to get direct access to Azure resources. Usually, we use the service principles from Entra ID, so this way, it increases security. Entra has helped to save time for our IT administrators. We tend to automate a lot of things. We can do automation using Graph APIs and save time. It is hard to quantify the time savings, but there has been a medium amount of time savings. Entra has helped to save our organization money. We care about security and risk more than money, but it also saves money. We are premium customers, and because we have a commit-to-consume contract with Microsoft of multi-million dollars, the money does not come into it because we have to consume those resources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The valuable features of Entra ID Protection include providing me visibility of my entire estate, managing access, and having a level of control."
"The protections for handling identity threats in Microsoft Entra ID Protection, such as the automated remediation, are working effectively."
"The reverse proxy feature provides additional security that is not available in other solutions."
"I recommend this product overall."
"The tool is simple and you can find a lot of tutorials, and videos on YouTube that can help you."
"The most valuable features are the API apps, which I use to connect to my cloud Protection."
"The deployment process is straightforward. It takes a few hours to complete."
"We've integrated our other software with Microsoft, and we log into other software using Microsoft. That's very helpful."
"Multifactor authentication is valuable."
"The solution integrates well with our infrastructure and other systems without any issues."
 

Cons

"Microsoft has not offered control over how they calculate high or low-risk scenarios."
"The recent CrowdStrike issue affected most systems."
"There is a lot of confusion around the user interface."
"Microsoft has room for improvement in simplifying their integration with third-party solutions and making the licensing model more understandable."
"Identity labeling and sensitivity needs improvement."
"I rate the quality of support at four out of ten because of inefficiencies in the ticket handling process. Tickets often bounce from person to person, requiring the sharing of information multiple times."
"The pricing could be improved."
"The solution is not optimized to work with Mac devices on a granular level. They work seamlessly with Windows but have a lot to improve to work with Mac devices. It also needs to improve stability and scalability."
"The solution's pricing and support services need improvement."
"We use a third-party API called Nebula API to integrate the account for authorization. The time-bound access area in Entra can be a problem. It can be improved in terms of the granularity of the permissions."
 

Pricing and Cost Advice

"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"Azure Active Directory Identity Protection is not very expensive."
"The price of Azure AD is not expensive."
"The product cost is on the expensive side."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"We are a Fortune 500 company, so we always negotiate with Microsoft."
"The product cost is in the mid to high range."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
885,728 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Government
9%
Manufacturing Company
8%
Computer Software Company
21%
Financial Services Firm
12%
Government
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise1
Large Enterprise5
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The pricing for Microsoft Entra ID protection is not expensive. It varies based on the company's size and quality.
What needs improvement with Azure Active Directory Identity Protection?
I do not think there are any areas that could be improved with Microsoft Entra ID Protection at this time.
What is your primary use case for Azure Active Directory Identity Protection?
I use Microsoft Entra ID Protection and provide support for features such as multifactor authentication and conditional access. I work with this solution every day.
What is your experience regarding pricing and costs for Microsoft Entra Permissions Management?
The product cost is in the mid to high range. You need to have a good budget to implement it, so it is considered fairly expensive for our market. I rate the pricing a seven out of ten.
What needs improvement with Microsoft Entra Permissions Management?
The solution's pricing and support services need improvement.
What is your primary use case for Microsoft Entra Permissions Management?
Our clients primarily use the product from a security management perspective.
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
CloudKnox Permissions Management
 

Overview

Find out what your peers are saying about Microsoft and others in Microsoft Security Suite. Updated: March 2026.
885,728 professionals have used our research since 2012.