Included
Basic identity included with Microsoft 365 and Azure subscriptions.
Premium
Conditional Access, hybrid identity and self-service password reset.
Premium
Risk-based identity protection and privileged access governance.
Policies
Rules that evaluate user, device and risk before granting access.