🌐
Microsoft Community Hub
techcommunity.microsoft.com › microsoft community hub › communities › products › microsoft security › microsoft sentinel › microsoft sentinel
Sentinel Licensing Requirements | Microsoft Community Hub
I am looking to find out what the minimal requirements are with respect to M365 for clients to be able to run Sentinel in their Azure Tenant. ... Gtiminski There's really no licensing for Azure Sentinel itself. Instead, make sure your licensing for the services that contain the data you want ...
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › sentinel › prerequisites
Prerequisites for deploying Microsoft Sentinel | Microsoft Learn
The Log Analytics workspace must not have a resource lock applied, and the workspace pricing tier must be pay-as-you-go or a commitment tier. Log Analytics legacy pricing tiers and resource locks aren't supported when enabling Microsoft Sentinel. For more information about pricing tiers, see Simplified pricing tiers for Microsoft Sentinel.
🌐
Cloud4C
cloud4c.com › blogs › microsoft-sentinel-costs-licensing-and-pricing-models-explained
Microsoft Sentinel: Costs, Licensing, and Pricing Models Explained
1) Data Ingestion Volume: Accurately estimating the volume of security data that will be ingested into Microsoft Sentinel is crucial for budgeting and cost management. 2) User Requirements: Determine the number of read-only and read-write users who will access the platform, as this directly impacts the user license costs.
🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 2125430 › how-to-purchase-sentinel
How to purchase sentinel? - Microsoft Q&A
To have Microsoft Sentinel in your environment you need to have an Azure subscription, Microsoft Entra ID license and a Log analytics workspace.
🌐
AlpenShield
alpenshield.io › en › faq › managed-sentinel › microsoft-licensing-and-technical-minimum-requirements
What are the (Microsoft) licensing and technical minimum requirements for the service? - AlpenShield
To use Managed Sentinel Service, ... the following additional licenses to take full advantage of the service: Microsoft 365 Security E5 (or at least the items listed below)...
🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 572832 › azure-sentinel-p1-p2-license
Azure Sentinel P1/P2 license - Microsoft Q&A
There's really no licensing for Azure Sentinel itself. Instead, make sure your licensing for the services that contain the data you want to connect to Azure Sentinel is licensed appropriately.
🌐
Reddit
reddit.com › r/azuresentinel › azure sentinel license
r/AzureSentinel on Reddit: Azure Sentinel license
April 13, 2022 -

Thanks in advance for helping. I read about Sentinel from many sources , need to know if anyone needs to use sentinel ,is there a service subscription cost or license cost or its just data ingestion cost ,any help in this is appreciated Need to start from scratch , have Azure AD and Azure VMs and E5 license so need to know how to get started with sentinel.

🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › sentinel › billing
Plan costs and understand pricing and billing - Microsoft Sentinel | Microsoft Learn
Microsoft Sentinel is generally available in the Microsoft Defender portal, including for customers without Microsoft Defender XDR or an E5 license.
Find elsewhere
🌐
Reddit
reddit.com › r/azure › is microsoft sentinel suitable for small and medium businesses?
r/AZURE on Reddit: Is Microsoft Sentinel Suitable for Small and Medium Businesses?
March 6, 2024 -

Hello everyone,

Having recently explored Microsoft Sentinel, I'm thoroughly impressed by its capabilities! I'm curious to know whether Microsoft Sentinel is commonly utilized by small and medium enterprises, or is it primarily geared towards larger corporations? Additionally, I'm interested in understanding its affordability. Can anyone shed some light on this? Also, I'm wondering if it's advisable for MSPs to integrate Sentinel into their client services?

Thank you!

Top answer
1 of 2
8

Hi,

I’ve been playing around with Microsoft Sentinel to increase our vision on unusual behaviour within the Office 365 services (Sharepoint, Exchange, Teams etc…)

Sentinel works great for a single tenant, however we manage tenants for all of our customers and it seems like you can use Azure Lighthouse to manage your CSP customers, however I’m struggling to understand the licensing that’s required in order to:

A) Use Azure Lighthouse for CSP customers
B) Use Microsoft Sentinel on the CSP customers we have Delegate Admin rights to

Has anybody else got a setup like this and can shed some light on what licenses I would need?

Thanks.

@Microsoft

2 of 2
2
azure.microsoft.com

Azure Lighthouse Pricing | Microsoft Azure

See pricing details for Azure Lighthouse advanced management services platform and tooling, which help service providers automate cloud management.

github.com

MicrosoftDocs/azure-docs/blob/main/includes/azure-lighthouse-samples-onboarding.md

---
title: include file
description: include file
services: lighthouse
author: JnHs
ms.service: lighthouse
ms.topic: include
ms.date: 01/26/2023
ms.author: jenhayes
ms.custom: include file
---

We provide different templates to address specific onboarding scenarios. Choose the option that works best, and be sure to modify the parameter file to reflect your environment. For more info about how to use these files in your deployment, see Onboard a customer to Azure Lighthouse.

| **Template** | **Description** |
|---------|---------|
| subscription | Onboard a customer's subscription to Azure Lighthouse. A separate deployment must be performed for each subscription. |
| rg and multi-rg | Onboard one or more of a customer's resource groups to Azure Lighthouse. Use rg.json to onboard a single resource group, or multi-rg.json to onboard multiple resource groups within a subscription. |
| marketplace-delegated-resource-management | If you've published a managed services offer to Azure Marketplace, you can optionally use this template to onboard resources for customers who have accepted the offer. The marketplace values in the parameters file must match the values that you used when publishing your offer. |

This file has been truncated. show original
🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 739782 › microsoft-sentinel-p1-p2-license
Microsoft Sentinel P1/P2 license - Microsoft Q&A
For my customer we are trialing MS Sentinel and trying to connector their AD signin logs but does not seem to connect. Audit logs are working fine. So we know we need a P1 or P2 license and that the AD P1 is provided by the M365 Business Premium…
🌐
TECHOM Systems
techomsystems.com.au › microsoft-azure-sentinel-deployment
Microsoft Azure Sentinel Deployment Service at TECHOM Systems
July 30, 2025 - Get Microsoft Azure Sentinel deployment and Microsoft Sentinel licensing requirements to ensure successful business implementation.
Call   1800 867 669
Address   470, St Kilda Road, 3004, Melbourne
🌐
CIAOPS
blog.ciaops.com › 2025 › 04 › 30 › minimum-viable-configuration-for-microsoft-sentinel
Minimum Viable Configuration for Microsoft Sentinel – CIAOPS
April 29, 2025 - Relevant Licenses: Microsoft 365 Business Premium (includes Defender for Business, Azure AD P1), M365 E3/E5, or standalone licenses (Azure AD P1/P2, Defender plans) are highly recommended for the data sources.
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › sentinel › connect-azure-active-directory
Send Microsoft Entra ID data to Microsoft Sentinel | Microsoft Learn
A Microsoft Entra ID P1 or P2 license is required to ingest sign-in logs into Microsoft Sentinel. Any Microsoft Entra ID license (Free/O365/P1 or P2) is sufficient to ingest the other log types.
🌐
Last9
last9.io › blog › everything-you-need-to-know-about-microsoft-sentinel-pricing
Everything You Need to Know About Microsoft Sentinel Pricing | Last9
February 7, 2025 - Data can be retained for up to 12 years to meet compliance requirements. Accessing historical data incurs additional costs. Search Jobs: Asynchronous queries that fetch and store results in a search table. Cost: $0.0062 per GB of data scanned. Log Data Restore: Restores historical data into the current hot cache for high-performance queries. Cost: $0.123 per GB per day (minimum charge: 2 TB for 12 hours, prorated hourly). Exporting data outside Sentinel can help with long-term storage, compliance, and integration with other security tools.
🌐
Digital Marketplace
applytosupply.digitalmarketplace.service.gov.uk › g-cloud › services › 594557716305466
Microsoft Sentinel SIEM Licences - Digital Marketplace
Purchase Microsoft Sentinel SIEM licences to utilise the power of Sentinel to collate log data from all of your Microsoft security tools and generate alarms for a SOC team to triage.
🌐
Microsoft Azure
azure.microsoft.com › en-us › pricing › details › microsoft-sentinel
Microsoft Sentinel Pricing | Microsoft Security
Discover Microsoft Sentinel pricing and cost estimates per GB. Connect to your data lake and leverage Microsoft Sentinel graph for scalable security analytics.
🌐
UnderDefense
underdefense.com › home › microsoft sentinel: pricing and key features in 2025
Microsoft Sentinel Pricing in 2025
March 6, 2025 - Discover Microsoft Sentinel 2025 pricing models and key features, including AI-powered threat detection, and cloud-native scalability.
🌐
TrustRadius
trustradius.com › home › security information and event management (siem) › microsoft sentinel › pricing
Microsoft Sentinel Pricing 2025
Microsoft Sentinel has 7 pricing plans(s). Available deployment types include saas. Review pricing options and learn more about the product to determine which plan is right for you.