Overview
Microsoft Entra ID Governance Add-on for Microsoft Entra ID P2 is a governance-focused extension for organizations that already use Microsoft Entra ID P2 and need more structured control over identity lifecycle, access lifecycle, and privileged access operations.
This add-on is best suited to businesses that already have advanced identity protection in place through Entra ID P2 and now want deeper governance around access requests, approvals, reviews, and entitlement management. It is a practical fit when identity administration needs to move beyond core access control and into more repeatable, auditable governance processes.
Best For
- Organizations that want to add governance controls to Microsoft Entra ID P2 for employees, guests, suppliers, and partners.
- Security and compliance teams that need recurring access reviews, stronger certification processes, and clearer visibility into access decisions.
- Businesses that want to automate onboarding, role changes, and offboarding workflows tied to identity and access changes.
- Enterprises that need tighter control over privileged access, separation-of-duties checks, and policy-driven governance at scale.
Included Features
Microsoft positions the governance add-on around entitlement management, lifecycle workflows, access reviews, and privileged identity management. In practice, this helps organizations automate access requests, assignment logic, approval steps, review cycles, and expiration rules instead of relying on manual follow-up.
The add-on is especially useful in environments where access to apps, groups, SharePoint resources, and other business systems must be granted in a controlled way and reviewed on a recurring basis. It also supports governance scenarios where internal users, external collaborators, and privileged roles all need to be handled within one consistent model.
For organizations already running Entra ID P2, this add-on is the right next step when the goal is to strengthen governance operations rather than replace the underlying identity platform. It adds governance depth on top of the existing P2 foundation instead of introducing a separate identity stack.
Key Benefits
- Adds governance depth to Microsoft Entra ID P2 without replacing the existing identity platform.
- Reduces access risk by automating approvals, reviews, assignments, and expiration of access rights.
- Supports compliance and audit goals through better visibility, recurring certification, and stronger policy enforcement.
- Helps organizations govern access across employees, guests, business partners, and administrators in a more scalable way.
Licensing and Fit
This product should be positioned as an add-on for organizations that already have Microsoft Entra ID P2 or another qualifying product with the required premium service plan. It is not the base identity license itself; it is the governance layer added when the customer needs more structured lifecycle and access control.
From a commercial perspective, this is the right fit for customers searching for an Entra Governance Add-on P2 Canada option or a Microsoft governance add-on Entra P2 extension after they have already standardized on Entra ID P2. If the main goal is simply core identity protection and foundational access management, Entra ID P2 remains the base product; if the goal is to add governance to Entra ID P2 Canada deployments, this add-on is the more specialized choice.
Microsoft does not currently show a separate public Canada list price for this add-on on its main Entra pricing pages. Because of that, the SKU is best presented as quote-based unless your internal CSP catalog already contains an approved Canadian sell price.