Mastering Configuration in Defender for Office 365 - Part Three

Customers are advised to purchase as many licenses as the users to protect.  Built-in Protection only provides baseline protection for all users in the organization. It is meant to be a temporary protection while you create custom policies for your organization or apply a preset security policy.