I am stuck in terms of licensing, going by the various docs on defender for O365, i have few concerns
1) Does the admin is the only one who needs to have Plan 2 to utilize reports, alerts, and investigations and the regular user can stay on Plan 1?
2) what is the benefit if i switch all users to P2 ? As a user how does it benefit? as an admin i know many reports can be gathered but what advantage end user get?
3) Are there benefits to the regular user that has no admin role, if I assign them a Plan 2 .
4) why plan 2 apart from reports?