Microsoft have updated the terms for Microsoft Defender for Office 365 to clarify its licensing requirements.

To recap, a licence is required for any user or mailbox that benefits from Defender for Office 365 protections. This includes users accessing their own or shared protected mailboxes, anyone using SharePoint, OneDrive, or Teams with Safe Attachments enabled, and those using Microsoft 365 apps or Teams with Safe Links active.

Although it’s possible to implement policies that restrict these features to specific users, this added wording is a useful reminder to be cautious when licensing tenant-level services.

You can find the recently added licensing terms here: https://bit.ly/48iV8OS.