Using MDCA with MDE P1

[Dean Gross]

I just had a client ask me if MDE P1 would provide them the ability to block unsanctioned apps through the integration with Defender for Cloud Apps, or does that functionality require MDE P2

[#2]

I think that I have found my own answer. It looks like while MDE P1 provides Web Protection, it does not support custom Indicators of Concern (this requires P2) and since MDCA generates these to block web apps on the endpoint, then MDE P2 will be required. Can anyone confirm my understanding?

[#3 · Accepted solution]

MDE P1 is sufficient.

https://docs.microsoft.com/en-us/defender-cloud-apps/mde-govern#prerequisites