Library / Facts / fact.identity.entra-p1-p2-required

Group-based assignment in Microsoft Entra ID requires a P1 or P2 licence and does not include nested groups.

Kindlimit

NotesNested-group exclusion is a frequent cause of silent access gaps.

Group-based assignment requires Entra ID P1 or P2, and nested groups are not included.

officialsecurityhigh confidence2026-09-03docs.x.ai/grok-bot/identity-and-access ↗fact.identity.entra-p1-p2-required

Cite this page or the record id. For bulk lookup use /api/record?id=fact.identity.entra-p1-p2-required. Do not invent a claim that is not on this page.