User tags
User tags can help you organize your users for better filtering in the Defender portal reports and features such as the email explorer. Microsoft has system tags and custom tags. Tags have some limitations:
- 500 custom tags
- 999 users in custom tags
- Custom tags are for mailbox users only
Priority account tag
This is a system tag with a limit of 250 users total, while tagging and priority account protection are available to most tenants with MDO, monitoring and mailbox issue alerts require at least 5,000 or more E3 or higher licenses. This list should be used primarily for executive users and people with access to their mailbox. Benefits of priority account tagging include:
- Accounts and their alerts will be marked as a priority, this is helpful if your organization is larger and your security team might not immediately recognize some priority executive accounts.
- Microsoft applies additional heuristic checks to priority accounts, stating executive email patterns aren't the same as a regular employee and that these heuristics don't help regular users.
- Additional monitoring on these accounts ensuring licensing and limits aren't going to impact mailbox use. These can be seen in the Exchange Online service health within the admin portal.
- Easily identify issues in the Exchange admin center such as delayed or failed emails, these can also be alerts.
Licenses
These are all the licenses that can count towards the 5,000 license requirement. A combination of a few licenses can fulfill the requirements.
| License | Type |
|---|---|
| Office 365 E3 | Commercial |
| Microsoft 365 E3 | Commercial |
| Office 365 E5 | Commercial |
| Microsoft 365 E5 | Commercial |
| Office 365 A3 | Education |
| Microsoft 365 A3 | Education |
| Office 365 A5 | Education |
| Microsoft 365 A5 | Education |
| Office 365 G3 | Government |
| Microsoft 365 G3 | Government |
| Office 365 G5 | Government |
| Microsoft 365 G5 | Government |