Microsoft Entra ID Governance

Microsoft Entra ID Governance licensing fundamentals

14 September 2026Doc update+5 / −6 lines

In brief

The licensing fundamentals page was updated to align the Account Discovery section and state that the feature requires the Microsoft Entra ID Governance add-on or Microsoft Entra Suite.

What Entra admins need to know

Administrators can use the updated licensing guidance when planning or validating Account Discovery deployments; no action is required.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

title: 'Microsoft Entra ID Governance licensing fundamentals' description: Learn about Microsoft Entra ID Governance license types, prerequisites, feature requirements, trials, and licensing for employees, guests, and agents. ~~author: tafra00 ms.author: tafra00~~ ms.service: entra-id-governance ms.topic: concept-article ms.date: 07/29/2026

This feature is available with Microsoft Entra ID P1, P2, and Microsoft Entra ID Governance subscriptions. A subscription license is required with enough seats for every identity that is sourced using the /bulkUpload API and provisioned to either on-premises Active Directory or Microsoft Entra ID.

Account Discovery

Account Discovery requires the Microsoft Entra ID Governance add-on or Microsoft Entra Suite. This feature allows administrators to discover existing user accounts in target applications and identify which users have matching Entra accounts or are orphan accounts. For more information, see Discover identities in target applications with Account Discovery.

License scenarios

|Customer License |Usage limits enforced at tenant level for API-driven provisioning | |Microsoft Entra ID P1 or P2 | Daily usage quota (number of user records that can be uploaded over 24-hour period): 100K user records (2000 /bulkUpload API calls with each request containing max of 50 records).

Max number of API-driven provisioning jobs for each flow: 2
o Max 2 apps for API-driven provisioning to on-premises Active Directory.
o Max 2 apps for API-driven provisioning to Microsoft Entra ID. | |Microsoft Entra ID Governance alongside Microsoft Entra ID P1 or P2 | Daily usage quota (number of user records that can be uploaded over 24-hour period): 300K user records (6000 /bulkUpload API calls with each request containing max of 50 records).

Max number of API-driven provisioning jobs for each flow: 20
o Max 20 apps for API-driven provisioning to on-premises Active Directory.
o Max 20 apps for API-driven provisioning to Microsoft Entra ID. |

Account Discovery

Licensing FAQs

Do licenses need to be assigned to users to use Identity Governance features?

@@ -1,8 +1,6 @@ --- title: 'Microsoft Entra ID Governance licensing fundamentals' description: Learn about Microsoft Entra ID Governance license types, prerequisites, feature requirements, trials, and licensing for employees, guests, and agents.-author: tafra00-ms.author: tafra00 ms.service: entra-id-governance ms.topic: concept-article ms.date: 07/29/2026@@ -90,10 +88,6 @@ A Global Administrator in a commercial tenant that has an appropriate prerequisi  This feature is available with Microsoft Entra ID P1, P2, and Microsoft Entra ID Governance subscriptions. A subscription license is required with enough seats for every identity that is sourced using the [/bulkUpload](/graph/api/synchronization-synchronizationjob-post-bulkupload) API and provisioned to either on-premises Active Directory or Microsoft Entra ID. -## Account Discovery--Account Discovery requires the Microsoft Entra ID Governance add-on or Microsoft Entra Suite. This feature allows administrators to discover existing user accounts in target applications and identify which users have matching Entra accounts or are orphan accounts. For more information, see [Discover identities in target applications with Account Discovery](../identity/app-provisioning/how-to-account-discovery.md).- ### License scenarios  |Customer License  |Usage limits enforced at tenant level for API-driven provisioning  |@@ -101,6 +95,11 @@ Account Discovery requires the Microsoft Entra ID Governance add-on or Microsoft |Microsoft Entra ID P1 or P2      |   Daily usage quota (number of user records that can be uploaded over 24-hour period): **100K user records (2000 /bulkUpload API calls with each request containing max of 50 records)**.<br><br>Max number of API-driven provisioning jobs for each flow: 2<br>o Max 2 apps for API-driven provisioning to on-premises Active Directory.<br>o Max 2 apps for API-driven provisioning to Microsoft Entra ID.      | |Microsoft Entra ID Governance alongside Microsoft Entra ID P1 or P2     | Daily usage quota (number of user records that can be uploaded over 24-hour period): **300K user records  (6000 /bulkUpload API calls with each request containing max of 50 records)**.<br><br>Max number of API-driven provisioning jobs for each flow: 20<br>o Max 20 apps for API-driven provisioning to on-premises Active Directory.<br>o Max 20 apps for API-driven provisioning to Microsoft Entra ID.        | +## Account Discovery++Account Discovery requires the Microsoft Entra ID Governance add-on or Microsoft Entra Suite. This feature allows administrators to discover existing user accounts in target applications and identify which users have matching Entra accounts or are orphan accounts. For more information, see [Discover identities in target applications with Account Discovery](../identity/app-provisioning/how-to-account-discovery.md).++ ## Licensing FAQs  ### Do licenses need to be assigned to users to use Identity Governance features?