Microsoft Intune
Device and app management licenses. Plan 2, the Suite and add-ons are bought on top of Plan 1.
| Feature | Intune Plan 1Base license, per user | Intune Plan 2Add-on, Plan 1 prerequisite | Intune SuiteAdd-on, Plan 1 prerequisite |
|---|---|---|---|
| Core endpoint management (Plan 1) | |||
| Cross-platform device management (MDM)[1] | From the Plan 1 prerequisite | From the Plan 1 prerequisite | |
| Mobile application management (MAM)[1] | From the Plan 1 prerequisite | From the Plan 1 prerequisite | |
| Built-in security and compliance policies[1] | From the Plan 1 prerequisite | From the Plan 1 prerequisite | |
| Endpoint analytics (basic)[1] | From the Plan 1 prerequisite | From the Plan 1 prerequisite | |
| Plan 2 features | |||
| Microsoft Tunnel for MAM[1] | |||
| Specialty and shared device management[1]Special-purpose devices such as AR/VR headsets and large-screen meeting devices. | |||
| Firmware-over-the-air updates (FOTA)[1] | |||
| Advanced modules (Intune Suite) | |||
| Remote Help[1]Secure remote assistance sessions for the help desk. | Sources conflict | ||
| Endpoint Privilege Management (EPM)[1]Controlled elevation of admin rights for standard users. | |||
| Advanced Analytics[1]Proactive endpoint analytics, anomaly detection and detailed device insights. | Sources conflict | ||
| Enterprise App Management (EAM)[1]App deployment and updates with a hosted app catalog. | |||
| Microsoft Cloud PKI[1]Cloud-based certificate lifecycle management without an on-premises PKI infrastructure. | |||
- Included
- Available as add-on
- Not confirmed in official sources
- Not included
- Plan 2, Intune Suite and all advanced modules require an Intune Plan 1 subscription. Plan 1 is included in Microsoft 365 E3, E5, EMS E3/E5 and Business Premium, and can also be purchased standalone.
- As of July 2026, Remote Help, Advanced Analytics and Plan 2 features were added to Microsoft 365 E3; in addition, EPM, Cloud PKI and Enterprise App Management were added to Microsoft 365 E5. Only Plan 2, Remote Help and Advanced Analytics were added to EMS E3/E5.
- Tunnel for MAM, FOTA and specialty device management cannot be purchased individually; they only come with Plan 2 or Intune Suite.
- Standalone prices (US, annual commitment, per user/month): Plan 1 $8.00, Plan 2 $4.00, Intune Suite $10.00, Remote Help $3.50, EPM $3.00, Advanced Analytics $5.00, Enterprise App Management $2.00, Cloud PKI $2.00.
- Intune depends on Microsoft Entra ID for identity and Conditional Access.
- A separate Intune device-only subscription, sold per device, is available for devices not associated with a user (kiosks, shared devices, meeting rooms, IoT). Devices enrolled with this license do not support user-based features such as app protection policies, Conditional Access and email.
- Microsoft's two sources conflict on Remote Help and Advanced Analytics: the Intune licensing page (Learn) shows them as included in Plan 2, while the Intune pricing page sells them as separate add-ons. The Plan 2 cells are therefore marked unclear.
Sources
Last updated: 16 October 2026