How to license global admin role and other admin roles?

Could anyone advise whether we need assign like AAD P1 license for Global Admin role (dedicated account) to enforce MFA through conditional access?

I know it is part of free AAD feature to enable MFA for GA role through Security Defaults or enabling MFA per user base.

Same question to other admin roles - whether AAD P1 license is required if enabling MFA through Conditional Access?

Any advice will be much appreciated.