Prerequisites
Ensure that these licenses are assigned before configuring MAM.
| License | Required for | Assignment |
|---|---|---|
| Microsoft Intune Plan 1 or a bundle that includes Microsoft 365 E3/E5, EMS E3/E5, Business Premium. | Enforcing app protection policies | Required for each protected user |
| Microsoft Entra ID P1 | Applying Conditional Access policies | Required only when Conditional Access is used |
Note: An Intune license is mandatory to enforce App Protection for a user. Assign the Intune license and application protection policy to the same group of users. Application protection cannot be enforced for a user without an Intune license. Without an Intune license, the application runs without MAM protection, such as PIN requirements and other restrictions.