I am attempting to setup azure event hubs and using my E5 license, but am getting the error message below.

Question

I am attempting to setup azure event hubs and using my E5 license, but am getting the error message below.

Affinitas Technology Solutions 20

In order to export Sign-in data, your organization needs Azure AD P1 or P2 license. If you don't have a P1 or P2, start a free trial.

Affinitas Technology Solutions 20 Reputation points

2025-08-06T17:45:10.78+00:00

Screenshot 2025-08-06 092613.png
Smaran Thoomu 29,415 Reputation points Microsoft External Staff Moderator

2025-08-06T19:44:26.0033333+00:00
Hi Affinitas Technology Solutions
Thanks for sharing the details.

Although you’re using a Microsoft 365 E5 license, the ability to export sign-in and risk-related data (like UserRiskEvents, RiskySignIns, etc.) to Azure Event Hubs requires Azure AD Premium P1 or P2 licensing specifically for Azure AD Identity Protection features.

The E5 license does include Azure AD Premium P2, but this must be assigned to the user(s) involved in the diagnostic settings. If the license isn’t assigned correctly or the tenant hasn’t activated the feature, you may still encounter this message.

Recommended steps:

Make sure the Azure AD Premium P2 license from E5 is assigned to your user account or to the relevant accounts.

If the license is assigned and you’re still seeing the message, try accessing the feature via Microsoft Entra Admin Center > Licenses > All products, and verify activation status.

Alternatively, you can click "Start a free trial" to temporarily enable P1/P2 features if you're still testing.

Useful docs:

https://learn.microsoft.com/en-us/entra/fundamentals/get-started-premium

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/howto-configure-diagnostic-settings

https://learn.microsoft.com/en-us/entra/id-protection/howto-export-risk-data

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.
Affinitas Technology Solutions 20 Reputation points

2025-08-06T20:11:10.0566667+00:00

Thanks for posting this information. I really appreciate it. However, I already tried the first two and because we are in a GCC High tenant there aren't trial licenses available. Any other thoughts are much appreaciated.
Smaran Thoomu 29,415 Reputation points Microsoft External Staff Moderator

2025-08-07T17:42:22.0933333+00:00

Affinitas Technology Solutions Thanks for the update. I’m currently checking with the internal team regarding this scenario in your GCC High environment.

To proceed further and help us investigate accurately, could you please share the information I requested in the private message? Once we have those details, we can follow up with the appropriate team to provide the best guidance.

Appreciate your patience and looking forward to your response.

Accepted answer

0 additional answers

Your answer

Affinitas Technology Solutions 20 Reputation points

2025-08-06T17:45:10.78+00:00

Screenshot 2025-08-06 092613.png
Smaran Thoomu 29,415 Reputation points Microsoft External Staff Moderator

2025-08-06T19:44:26.0033333+00:00

Hi Affinitas Technology Solutions
Thanks for sharing the details.

Although you’re using a Microsoft 365 E5 license, the ability to export sign-in and risk-related data (like UserRiskEvents, RiskySignIns, etc.) to Azure Event Hubs requires Azure AD Premium P1 or P2 licensing specifically for Azure AD Identity Protection features.

The E5 license does include Azure AD Premium P2, but this must be assigned to the user(s) involved in the diagnostic settings. If the license isn’t assigned correctly or the tenant hasn’t activated the feature, you may still encounter this message.

Recommended steps:

Make sure the Azure AD Premium P2 license from E5 is assigned to your user account or to the relevant accounts.

If the license is assigned and you’re still seeing the message, try accessing the feature via Microsoft Entra Admin Center > Licenses > All products, and verify activation status.

Alternatively, you can click "Start a free trial" to temporarily enable P1/P2 features if you're still testing.

Useful docs:

https://learn.microsoft.com/en-us/entra/fundamentals/get-started-premium

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/howto-configure-diagnostic-settings

https://learn.microsoft.com/en-us/entra/id-protection/howto-export-risk-data

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.
Affinitas Technology Solutions 20 Reputation points

2025-08-06T20:11:10.0566667+00:00

Thanks for posting this information. I really appreciate it. However, I already tried the first two and because we are in a GCC High tenant there aren't trial licenses available. Any other thoughts are much appreaciated.
Smaran Thoomu 29,415 Reputation points Microsoft External Staff Moderator

2025-08-07T17:42:22.0933333+00:00

Affinitas Technology Solutions Thanks for the update. I’m currently checking with the internal team regarding this scenario in your GCC High environment.

To proceed further and help us investigate accurately, could you please share the information I requested in the private message? Once we have those details, we can follow up with the appropriate team to provide the best guidance.

Appreciate your patience and looking forward to your response.

Answer 1

Hi Affinitas Technology Solutions
Thanks for your patience. I confirmed internally that the message you're seeing -"In order to export Sign-in data, your organization needs Azure AD P1 or P2 license”- is purely informational. In GCC High environments, this banner can appear even when the licensing is correctly in place and does not block the functionality you’re trying to use.

As long as the users have the appropriate Azure AD Premium P2 license assigned, you should still be able to proceed with exporting sign-in or risk data to Azure Event Hubs without interruption.

While there's no GCC-High-specific doc called out in mainstream licensing articles, the general guidance on licensing requirements for Azure AD diagnostic and Identity Protection features applies here - such as outlined in Microsoft’s documentation:

Get started with Premium licensing for Microsoft Entra ID - which details the need for P1/P2 depending on features: Microsoft Learn

So, in your scenario, the message is expected and informational. Feel free to test the export - if you encounter any functional errors in the process, do let me know and we’ll dig further.

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

I am attempting to setup azure event hubs and using my E5 license, but am getting the error message below.

0 additional answers

Your answer