MT.1022: All users utilizing a P1 license should be licensed.
| ID | MT.1022 |
| Severity | Low |
| Suite | Mito |
| Product | Entra ID |
| Feature | Conditional Access |
| Security area | Infrastructure hardening |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Medium |
| Reads from | Microsoft Graph |
| Licence needed | AAD_PREMIUM |
What this checks and how to fix it
Section titled “What this checks and how to fix it”All users who utilize Entra ID P1 features should be licensed for Entra ID P1.
This test uses the Entra ID premium licence utilization insights in Microsoft Graph to compare the number of users covered by Conditional Access with the number of users entitled to an Entra ID P1 licence. The test fails when more users utilize P1 features than are licensed.
Remediation action
Section titled “Remediation action”Assign Entra ID P1 licences to every user who is in scope of Conditional Access policies, or reduce the scope of those policies to licensed users.
Related links
Section titled “Related links”- Introducing Microsoft Entra license utilization insights - Microsoft Community Hub
- Microsoft Entra licensing - Microsoft Learn
Mito check. Author: f-bader; contributors: merill. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.