Learn
Discover
Product documentation
Development languages
Topics
Sign in
Microsoft Defender
Microsoft Defender products & services
Security resources
Learn
/
Microsoft Defender
/
Microsoft Defender XDR
/
Microsoft Defender XDR
prerequisites
Article
•
04/02/2025
•
17 contributors
•
Applies to:
Microsoft Defender XDR
Feedback
In this article
Licensing requirements
Required permissions
Browser requirements
Availability to US GCC, GCC High, and other US government institutions
Related articles
Learn about licensing and other requirements for provisioning and using
Microsoft Defender
XDR
.
Microsoft Defender XDR natively correlates Microsoft security products' signals, providing
security operations teams a single pane of glass to detect, investigate, respond, and protect
your assets. These signals are dependent on the license that you have and the access
provisioned to you.
Any of these licenses give you access to Microsoft Defender XDR features via the Microsoft
Defender portal without any additional cost:
Microsoft 365 E5 or A5
Microsoft 365 E3 with the Microsoft 365 E5 Security add-on
Microsoft 365 E3 with the Enterprise Mobility + Security E5 add-on
Microsoft 365 A3 with the Microsoft 365 A5 Security add-on
Windows 10 Enterprise E5 or A5
Windows 11 Enterprise E5 or A5
Enterprise Mobility + Security (EMS) E5 or A5
Office 365 E5 or A5
Microsoft Defender for Endpoint
Microsoft Defender for Identity
Microsoft Defender for Cloud Apps or
Cloud App Discovery
Microsoft Defender for Office 365 (Plan 2)
Microsoft 365 Business Premium
Microsoft Defender for Business
For more information,
view the Microsoft 365 Enterprise service plans
.
Don't have license yet?
Try or buy a Microsoft 365 subscription
Go to Microsoft 365 admin center (
admin.microsoft.com
) to view your existing licenses. In the
admin center, go to Billing > Licenses.
You must at least be a security administrator in Microsoft Entra ID to turn on Microsoft
Defender XDR. For the list of roles required to use Microsoft Defender XDR and information on
how access to data is regulated, read about
managing access to Microsoft Defender XDR
.
Access Microsoft Defender XDR in the Microsoft Defender portal using Microsoft Edge,
Internet Explorer 11, or any HTML 5 compliant web browser.
For information related to US Government customers, see
Microsoft Defender XDR for US
Government customers
.
Currently, the Microsoft Defender for Office 365 integration into the unified Microsoft
Defender XDR features are not available to customers in the following Office 365 datacenter
locations:
Norway
South Africa
United Arab Emirates
Sweden
Singapore
Microsoft Defender XDR overview
Turn on Microsoft Defender XDR
Manage access and permissions
Licensing requirements
Note
Automatic attack disruption requires Microsoft Defender for Endpoint Plan 2. For more
information, see
Configure automatic attack disruption capabilities
.
Check your existing licenses
Note
You need to be assigned either the Billing admin or Global reader
role in Microsoft Entra
ID
to be able to see license information. If you encounter access problems, contact a
Global Administrator.
Required permissions
Important
Microsoft recommends that you use roles with the fewest permissions. Using lower
permissioned accounts helps improve security for your organization. Global Administrator
is a highly privileged role that should be limited to emergency scenarios when you can't
use an existing role.
Browser requirements
Availability to US GCC, GCC High, and other
US government institutions
Related articles
Tip
Do you want to learn more? Engage with the Microsoft Security community in our Tech
Community:
Microsoft Defender XDR Tech Community
.
Feedback
Was this page helpful?
Yes
No
Provide product feedback
Additional resources
Training
Module
Introduction to Microsoft Defender XDR -
Training
Understand what Microsoft Defender XDR is and
how it can help to improve your security posture
by empowering your Security Operations Center
(SOC) or security teams with the tools they need
Certification
Microsoft Certified: Security Operations Analyst
Associate - Certifications
Investigate, search for, and mitigate threats using
Microsoft Sentinel, Microsoft Defender for Cloud,
and Microsoft 365 Defender.
Documentation
What is Microsoft Defender XDR? - Microsoft
Defender XDR
Microsoft Defender XDR is a coordinated threat
protection solution designed to protect devices,
identity, data, and applications.
Microsoft Defender XDR documentation -
Microsoft Defender XDR
Learn about the robust security solutions in
Microsoft Defender XDR so that you can better
protect your enterprise across attack surfaces.
Turn on Microsoft Defender XDR - Microsoft
Defender XDR
Learn how to enable Microsoft Defender XDR and
start integrating your security incident and
response.
Show 5 more
Microsoft Defender XDR
Overview
Data security and privacy
Microsoft security portals
Plan
Pilot and deploy Microsoft Defender XDR
Get started
Protect against threats
Investigate and respond to threats
Enhance security operations
Manage multitenant environments
Manage roles and permissions
Reference
Resources
Microsoft Defender XDR docs
Download PDF
Learn
Sign in
/
Microsoft Defender XDR
/
Microsoft Defender XDR
prerequisites
Article
•
04/02/2025
•
17 contributors
•
Applies to:
Microsoft Defender XDR
Feedback
In this article
Licensing requirements
Required permissions
Browser requirements
Availability to US GCC, GCC High, and other US
government institutions
Related articles
Learn about licensing and other requirements
for provisioning and using
Microsoft Defender
XDR
.
Microsoft Defender XDR natively correlates
Microsoft security products' signals, providing
security operations teams a single pane of glass
to detect, investigate, respond, and protect your
assets. These signals are dependent on the
license that you have and the access
provisioned to you.
Any of these licenses give you access to
Microsoft Defender XDR features via the
Microsoft Defender portal without any
additional cost:
Microsoft 365 E5 or A5
Microsoft 365 E3 with the Microsoft 365 E5
Security add-on
Microsoft 365 E3 with the Enterprise
Mobility + Security E5 add-on
Microsoft 365 A3 with the Microsoft 365
A5 Security add-on
Windows 10 Enterprise E5 or A5
Windows 11 Enterprise E5 or A5
Enterprise Mobility + Security (EMS) E5 or
A5
Office 365 E5 or A5
Microsoft Defender for Endpoint
Microsoft Defender for Identity
Microsoft Defender for Cloud Apps or
Cloud App Discovery
Microsoft Defender for Office 365 (Plan 2)
Microsoft 365 Business Premium
Microsoft Defender for Business
For more information,
view the Microsoft 365
Enterprise service plans
.
Don't have license yet?
Try or buy a
Microsoft 365 subscription
Go to Microsoft 365 admin center
(
admin.microsoft.com
) to view your existing
licenses. In the admin center, go to Billing >
Licenses.
You must at least be a security administrator in
Microsoft Entra ID to turn on Microsoft
Defender XDR. For the list of roles required to
use Microsoft Defender XDR and information on
how access to data is regulated, read about
managing access to Microsoft Defender XDR
.
Access Microsoft Defender XDR in the Microsoft
Defender portal using Microsoft Edge, Internet
Explorer 11, or any HTML 5 compliant web
browser.
For information related to US Government
customers, see
Microsoft Defender XDR for US
Government customers
.
Currently, the Microsoft Defender for Office 365
integration into the unified Microsoft Defender
XDR features are not available to customers in
the following Office 365 datacenter locations:
Norway
South Africa
United Arab Emirates
Sweden
Singapore
Microsoft Defender XDR overview
Turn on Microsoft Defender XDR
Manage access and permissions
Licensing requirements
Note
Automatic attack disruption requires
Microsoft Defender for Endpoint Plan 2. For
more information, see
Configure
automatic attack disruption capabilities
.
Check your existing licenses
Note
You need to be assigned either the
Billing
admin
or Global reader
role in Microsoft
Entra ID
to be able to see license
information. If you encounter access
problems, contact a Global Administrator.
Required permissions
Important
Microsoft recommends that you use roles
with the fewest permissions. Using lower
permissioned accounts helps improve
security for your organization. Global
Administrator is a highly privileged role
that should be limited to emergency
scenarios when you can't use an existing
role.
Browser requirements
Availability to US GCC, GCC
High, and other US
government institutions
Related articles
Tip
Do you want to learn more? Engage with
the Microsoft Security community in our
Tech Community:
Microsoft Defender XDR
Tech Community
.
Feedback
Was this page helpful?
Yes
No
Provide product feedback
Additional resources
Documentation
What is Microsoft Defender XDR? - Microsoft
Defender XDR
Microsoft Defender XDR is a coordinated threat
protection solution designed to protect devices,
identity, data, and applications.
Microsoft Defender XDR documentation - Microsoft
Defender XDR
Learn about the robust security solutions in Microsoft
Defender XDR so that you can better protect your
enterprise across attack surfaces.
Turn on Microsoft Defender XDR - Microsoft
Defender XDR
Learn how to enable Microsoft Defender XDR and start
integrating your security incident and response.
Show 5 more
Training
Module
Introduction to Microsoft Defender XDR - Training
Understand what Microsoft Defender XDR is and how it
can help to improve your security posture by
empowering your Security Operations Center (SOC) o
…
Certification
Microsoft Certified: Security Operations Analyst
Associate - Certifications
Investigate, search for, and mitigate threats using
Microsoft Sentinel, Microsoft Defender for Cloud, and
Microsoft 365 Defender.
English (United Kingdom)
Your Privacy Choices
Theme
Manage cookies
Previous Versions
Blog
Contribute
Privacy
Terms of Use
Trademarks
© Microsoft 2025
English (United Kingdom)
Your Privacy Choices
Theme
Manage cookies
Previous Versions
Blog
Contribute
Privacy
Terms of Use
Trademarks
© Microsoft 2025