License & Subscription Issues

Licensing Requirements for Microsoft Defender Phishing Simulations

Maira Mehtab Sep 22, 2026 869 views

Question details

The user is seeking clarification on whether Microsoft Defender for Office 365 Attack Simulation Training licensing applies only to administrators creating the simulations or to the participating end users as well.

Product: Microsoft Defender for Office 365
Device & OS: not provided
Scenario: Planning or configuring simulated phishing campaigns to train employees on security awareness.
Observed behavior: Looking for the exact licensing requirements for end users who receive and interact with the simulated phishing attacks.

Before you start

Ensure you have access to the Microsoft 365 admin center with billing or global administrator privileges to verify your current tenant subscription and user license assignments.

Solution 1Recommended

Verify Licensing for Attack Simulation Training Participants

Confirm that all end users participating in the simulation hold the appropriate licenses to comply with Microsoft's terms.

According to Microsoft's licensing requirements, any end user who participates in a simulated phishing attack must be properly licensed. The licensing requirement is not restricted to the IT administrators who conduct or create the simulation.

To legally cover the participants in your tenant, targeted users must have a Microsoft Defender for Office 365 Plan 2 license, or a qualifying package that includes it (such as Microsoft 365 E5).

Access the Admin Center

Check Active Licenses

Navigate to 'Billing' and select 'Licenses' to see if your organization possesses enough Microsoft Defender for Office 365 Plan 2 or Microsoft 365 E5 licenses.

Review User Assignments

Go to 'Users' > 'Active users', select the end users who will be participating in the campaign, and click the 'Licenses and apps' tab to ensure the correct license is assigned to each individual.

Consult Documentation

Review the official Microsoft Defender documentation for Attack Simulation Training to stay updated on any recent changes to scenario-specific licensing requirements.

Licensing Scope: If an end user does not have the required license, they are not authorized to participate in the simulation, even if the administrator creating the campaign is fully licensed.

Free Microsoft Office alternative

Looking for a Simpler Office Solution? Try WPS Office

While Microsoft 365 offers advanced enterprise security features like Defender Attack Simulation, its complex licensing structures can be overwhelming. If your primary goal is to empower your team with powerful, lightweight, and user-friendly office applications for document creation, spreadsheets, and presentations, WPS Office is an excellent alternative.

1. Visit the Official Website: Go to the official WPS Office website to access the download page.
2. Download the Installer: Click the 'Free Download' button to get the setup file tailored for your operating system.
3. Install and Launch: Run the installer, follow the on-screen instructions, and start using your free office suite immediately.

No complex licensing requirements or tiered subscription confusion for standard office tasksFully compatible with Microsoft Word, Excel, and PowerPoint file formatsLightweight application that runs smoothly across Windows, Mac, Linux, iOS, and AndroidFamiliar user interface ensuring seamless migration and minimal learning curve for end usersFree to download and use for essential document creation and editing

microsoft office alternative - wps office

Frequently Asked Questions

Do I need a Defender for Office 365 Plan 2 license for every user?

Yes, to use Attack Simulation Training compliantly, every end user who is targeted by a simulation must be licensed with Defender for Office 365 Plan 2 or a qualifying bundle that includes it.

Can I run a phishing simulation if only the administrator has the proper license?

No. According to Microsoft licensing terms, the license requirement extends to the end users receiving and interacting with the simulation, not just the IT administrator who creates and launches the campaign.

Where can I check if my users have the right Defender licenses?

You can verify user licenses by logging into the Microsoft 365 admin center, navigating to the 'Users' menu, selecting 'Active users', and checking the 'Licenses and apps' tab for the specific individuals.

Login & Account Issues