Optimizing endpoint security with Microsoft Defender for Endpoint's flexible licensing options

To all,

I am trying to download a csv file of all devices listing the Defender "Device Subscription state", using either Get-WmiObject or Get-MpComputerStatus, but the results do not include that information?

Also, is it possible to assign a particular Defender Subscription Plan to a user rather than to a device, eg All students get P1? I suspect that this is a no-go as the logistics would be complicated as a device cannot suddenly change plan, but I have been tasked to confirm either way.

We use Asset Rules to tag devices...

Thanks for your time.

Rgds