Hi,
We have the following setup:
- 400 humans
- standard AD domain in a single forest (sync'ed via AADConnect to the Entra tenant)
500 AD accounts (user accounts + service accounts),
450 synced to Entra ID (some on-prem service accounts are not synced),
400 accounts with M365 E5 licenses (RBAC accounts do not get any licenses),
MDI sensors installed - 3 separate dev/UAT/prod AD domains (each in a separate forest, no trusts, isolated): 20 accounts, 300 accounts, 500 accounts (prod AD has many accounts for external clients/consultants/etc).
accounts not synchronized to anywhere
we want to start using MS Defender for Identity for these domains to sync to the existing MDI workspace.
1. Are these 400 M365 E5 licenses enough for the whole environment (1+3 AD domains) ?
2. If not, what is the final count of licenses needed?
3. how many licenses need to be bought and of which SKU?