Defender for Endpoint P2 features instead of P1

All,

One of my customers bought Defender for Endpoint P1 on its tenant. Unfortunatly, he has all the P2 features activated like EDR and Vulnerability Assessment. EDR creates a lot of logs and consume a lot of resources on devices. How can he do to get only P1 features please?

Thanks a lot for your support.