I am attempting to setup azure event hubs and using my E5 license, but am getting the error message below.

Screenshot 2025-08-06 092613.png

Hi Affinitas Technology Solutions
Thanks for sharing the details.

Although you’re using a Microsoft 365 E5 license, the ability to export sign-in and risk-related data (like UserRiskEvents, RiskySignIns, etc.) to Azure Event Hubs requires Azure AD Premium P1 or P2 licensing specifically for Azure AD Identity Protection features.

The E5 license does include Azure AD Premium P2, but this must be assigned to the user(s) involved in the diagnostic settings. If the license isn’t assigned correctly or the tenant hasn’t activated the feature, you may still encounter this message.

Recommended steps:

• Make sure the Azure AD Premium P2 license from E5 is assigned to your user account or to the relevant accounts.
• If the license is assigned and you’re still seeing the message, try accessing the feature via Microsoft Entra Admin Center > Licenses > All products, and verify activation status.
• Alternatively, you can click "Start a free trial" to temporarily enable P1/P2 features if you're still testing.

Useful docs:

• https://learn.microsoft.com/en-us/entra/fundamentals/get-started-premium
• https://learn.microsoft.com/en-us/entra/identity/monitoring-health/howto-configure-diagnostic-settings
• https://learn.microsoft.com/en-us/entra/id-protection/howto-export-risk-data

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.

Thanks for posting this information. I really appreciate it. However, I already tried the first two and because we are in a GCC High tenant there aren't trial licenses available. Any other thoughts are much appreaciated.