Try our new research platform with insights from 80,000+ expert users

Microsoft Entra ID Protection vs Microsoft Entra Permissions Management [EOL] comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
Identity Management (IM) (7th), Microsoft Security Suite (9th), Identity Threat Detection and Response (ITDR) (2nd)
Microsoft Entra Permissions...
Average Rating
7.0
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

reviewer2133984 - PeerSpot reviewer
Sr. Security Analyst/Incident Response at a retailer with 5,001-10,000 employees
Conditional access provides detailed security customization
The best features of Microsoft Entra ID Protection are the conditional aspects, particularly the conditions that can be created. Microsoft Entra ID Protection has helped us because it gives us conditions that we can filter on or support, providing us more granularity. Microsoft Entra ID Protection allows blocking based on geolocation and similar parameters. The protections for handling identity threats in Microsoft Entra ID Protection, such as the automated remediation, are working effectively. With Microsoft Entra ID Protection, we are able to pivot off of particular alerts and stay abreast of them, which works to enhance our organization's security strategy. They definitely aid in threat detection with Microsoft Entra ID Protection.
Sameer Bhat - PeerSpot reviewer
Vice President at Goldman Sachs
Provides resource-based access and security, but time-bound access can be a problem
Entra ID is the core of the identity management that we have. This is the key product that we are using. I am currently also looking into Entra Private Access because we are planning to deploy about 50,000 desktops into Azure and use Azure Virtual Desktop. We would like to give access to the users from the desktop to on-premises applications. I learned that Entra Private Access is a good solution. That is not yet GA, but that is what we are looking for. Entra provides a single pane of glass for managing user access, but because our company also integrates with Nebula API, only administrators use Entra's pane. A normal person who wants to get onboarded can do self-service using Nebula. The features for whitelisting and other things are definitely there. That is what we use specifically. Application IDs, enterprise applications, and all those things are already there, so we have more efficiency. There is also security because we usually do not allow user identities to get direct access to Azure resources. Usually, we use the service principles from Entra ID, so this way, it increases security. Entra has helped to save time for our IT administrators. We tend to automate a lot of things. We can do automation using Graph APIs and save time. It is hard to quantify the time savings, but there has been a medium amount of time savings. Entra has helped to save our organization money. We care about security and risk more than money, but it also saves money. We are premium customers, and because we have a commit-to-consume contract with Microsoft of multi-million dollars, the money does not come into it because we have to consume those resources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find the most valuable feature to be conditional access."
"The solution's technical support offers great assistance to users."
"I find the most valuable feature to be conditional access. It allows for comprehensive security controls, network security, and application label security."
"I use conditional access most of the time."
"For me, automatization is most valuable."
"As an end-user, I find the experience to be quite seamless. My main advantage is that I only need to manage one login and one two-factor authentication method to access all the necessary tools. I don't have to set up separate logins and authentication for each application."
"Microsoft Entra ID Protection's features are suitable for all sizes of companies; it's a must-have product because traditionally Active Directory was used for identity and authentication on computers, and now with hybrid capabilities, every company of any size needs these features and tools."
"The solution helps us with authentication."
"The solution integrates well with our infrastructure and other systems without any issues."
"Multifactor authentication is valuable."
 

Cons

"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."
"Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable."
"Identity protection and trust issues, particularly in hybrid environments, could be addressed better with Microsoft Entra ID Protection. This would aid connectivity concerns."
"The recent CrowdStrike issue affected most systems."
"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."
"There is room for improvement in the ability for Entra ID Protection to inherit roles and configurations from whatever solution I am migrating from, so that these don't have to be built from the ground up during the implementation process."
"I did have some trouble finding specific documentation, particularly for troubleshooting."
"A potential area of improvement in Microsoft Entra ID Protection could include backup-level capability or snapshot capability."
"We use a third-party API called Nebula API to integrate the account for authorization. The time-bound access area in Entra can be a problem. It can be improved in terms of the granularity of the permissions."
"The solution's pricing and support services need improvement."
 

Pricing and Cost Advice

"The product cost is on the expensive side."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"Azure Active Directory Identity Protection is not very expensive."
"The price of Azure AD is not expensive."
"The product cost is in the mid to high range."
"We are a Fortune 500 company, so we always negotiate with Microsoft."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
9%
Government
9%
Computer Software Company
20%
Financial Services Firm
15%
Government
9%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise1
Large Enterprise4
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The pricing for Microsoft Entra ID protection is not expensive. It varies based on the company's size and quality.
What needs improvement with Azure Active Directory Identity Protection?
We explore the possibilities to use Purview to control our applications, though not very deeply as it's not very helpful at this moment.For us, the most important problem is access; we need an easy...
What is your primary use case for Azure Active Directory Identity Protection?
We are still deep involved in the use of Microsoft technology for databases and business intelligence, and in the last three years with Power Apps and Power Automate, all that means Azure services,...
What is your experience regarding pricing and costs for Microsoft Entra Permissions Management?
The product cost is in the mid to high range. You need to have a good budget to implement it, so it is considered fairly expensive for our market. I rate the pricing a seven out of ten.
What needs improvement with Microsoft Entra Permissions Management?
The solution's pricing and support services need improvement.
What is your primary use case for Microsoft Entra Permissions Management?
Our clients primarily use the product from a security management perspective.
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
CloudKnox Permissions Management
 

Overview

Find out what your peers are saying about Microsoft and others in Microsoft Security Suite. Updated: December 2025.
879,422 professionals have used our research since 2012.