What license(s) is/are required to implement Blocking high risk agent identities from accessing resources?

Dear @Matthew Brunk

For “Block high-risk agent identities from accessing resources”, the required licensing is Microsoft Agent 365.

If you want to use the broader Microsoft 365 E7 licensing model, that also covers the required Agent 365 capabilities.

In your case, Microsoft Entra ID P2 + Microsoft 365 Business Premium alone is not sufficient for this specific Conditional Access scenario.

Official documentation: https://learn.microsoft.com/en-us/entra/id-protection/concept-risky-agents

If this answers your query, please click Accept Answer and Upvote if you found it helpful. If you have any further questions, feel free to let us know.