Use Microsoft Intune Suite add-on capabilities

Microsoft Intune Suite provides mission-critical advanced endpoint management and security capabilities into Microsoft Intune. You can find add-ons to Intune in the Microsoft Intune admin center under Tenant administration > Intune add-ons. The Summary blade shows all available Intune add-ons, a short description, and the status of the add-on. Each add-on shows a status of either Active or Available for trial or purchase.

Licenses for the Intune add-ons can be added for an additional cost to the licensing options that include Microsoft Intune or Microsoft Configuration Manager. For more information, see Licenses available for Microsoft Intune.

Available add-ons

Some capabilities are available to buy as a standalone add-on. Other capabilities are only available with Intune Plan 2 or the Intune Suite.

The following table provides a list of add-on capabilities and associated Intune Plans. For information about Microsoft Intune Plans and pricing, see Intune Plans and pricing.

Microsoft Intune Endpoint Privilege Management

Endpoint Privilege Management supports your zero-trust journey by helping your organization achieve a broad user base running with least privilege, while allowing users to still run tasks allowed by your organization to remain productive.

For more information, see Endpoint Privilege Management.

Microsoft Intune Enterprise App Management

Enterprise App Management is an Intune Suite add-on that is available for trial and purchase. Enterprise Application Management provides an Enterprise App Catalog of Win32 applications that are easily accessible in Intune. You can add these applications to your tenant by selecting them from the Enterprise App Catalog. When you add an Enterprise App Catalog app to your Intune tenant, default installation, requirements, and detection settings are automatically provided. You can modify these settings as well. In addition, Intune hosts Enterprise App Catalog apps in Microsoft storage. For more information, see Microsoft Intune Enterprise Application Management.

Microsoft Intune Advanced Analytics

Microsoft Intune Advanced Analytics is set of analytics-driven capabilities that help IT admins understand, anticipate, and improve the end-user experience.

For more information, see Intune Advanced Analytics.

Microsoft Intune Remote Help

Remote Help is a cloud-based solution for secure help desk connections with role-based access controls. For more information, see Remote Help.

Microsoft Tunnel for Mobile Application Management

When you use the Microsoft Tunnel VPN Gateway, you can extend Tunnel support by adding Tunnel for Mobile Application Management (MAM). Tunnel MAM extends the Microsoft Tunnel VPN gateway to support devices that run Android or iOS, and that aren't enrolled with Microsoft Intune.

For more information, see Microsoft Tunnel for Mobile Application Management.

Microsoft Cloud PKI

Microsoft Cloud PKI is a cloud-based service that simplifies and automates certificate lifecycle management for Intune-managed devices. It provides a dedicated public key infrastructure (PKI) for your organization and handles the certificate issuance, renewal, and revocation for all Intune-supported platforms.

For more information, see Overview of Microsoft Cloud PKI.

Mobile Firmware-over-the-air update

Firmware over-the-air (FOTA) update allows you to remotely update the firmware of supported devices wirelessly with more control.

For more information, see Zebra LifeGuard Over-the-Air Integration with Microsoft Intune

Managing specialty devices with Microsoft Intune

Specialized devices management is a set of device management, configuration, and protection capabilities for special, purpose-built devices such as AR/VR headsets, large smart-screen devices, and conference room meeting devices.

For more information, see Managing specialized devices with Microsoft Intune.

Using the Intune add-ons page

1. Sign in to the Microsoft Intune admin center as a Global or Billing administrator.

2. Navigate to Tenant administration > Intune add-ons.

3. The Your add-ons tab shows a list of all Intune add-ons in trial or purchased for a billing account in your organization.

4. The All add-ons tab shows you a list of all Intune add-ons that are available for trial or purchase. For more information on how to Try or buy Intune add-ons, see Try or buy Intune add-ons.

5. The Capabilities tab provides details about each of the Intune add-on capabilities that are available for trial or purchase. For more information, select Learn more.

Try or buy Intune add-ons

Global and Billing administrators can choose to start free trials or purchase licenses for Intune add-ons through the Microsoft 365 admin center. Administrators who aren't Global or Billing administrators can still see the status of their tenant's Intune add-ons trial or active licenses in the centralized Intune add-on page in the Intune admin center. However, they can't start a free trial or purchase licenses.

Starting a free trial gives you a 90-day period to use the Intune add-on capability without any charge. Trials can be up to 250 users per tenant. At the end of the trial period, there's a 30-day grace period. After this point, you'll be unable to use the Intune add-on capability in Microsoft Intune for users within your tenant unless you've purchased the appropriate licenses. There's a one-time limit to start a trial for each tenant.

Purchasing licenses lets you use the Intune add-on capability in your tenant for the duration in which the licenses are active on your tenant based on the option selected during the Billing process.

Intune add-on capabilities are disabled in Microsoft Intune admin center unless you are in the free trial period or have purchased licenses.

How to start a trial through the Microsoft 365 admin center

1. Sign in to the Microsoft Intune admin center as a Global or Billing administrator.

2. Navigate to Tenant administration > Intune add-ons.

3. Select All add-ons tab. The list of Intune add-ons that are available for trial or purchase is displayed. Identify the Intune add-ons that you require. The list of add-ons includes a short description, the subscription status of the add-on, and a link to view details.

   • Subscription status - Each add-on shows a status of either Active or Available for trial or purchase. For add-ons that say Available for trial or purchase in the Subscription status column, you can start the free trial or purchase licenses.

   • Try or Buy - Select View details in the Try or Buy column to know more about what's included and the trial and purchase information.

   • Select To try or buy, go to Purchase services link to navigate to the Microsoft 365 admin center. A new tab opens on the Product details page for the selected Intune add-on.

4. In the Microsoft 365 Admin Center, follow the prompts to Start free trial and confirm your order.

5. Navigate to Tenant administration > Intune add-ons and see that the Intune add-on capability you added is now Active.

How to purchase Intune add-ons

Licenses for Intune add-ons can be purchased just as you would purchase Intune Plan 1 licenses through the following ways:

• Web direct purchase in the Microsoft 365 Admin Center
• Microsoft Volume License Servicing Center (VLSC)
• Existing relationships with Microsoft partners/resellers

After you buy licenses via any source, the licenses are available in your tenant and the status of the Intune add-ons capability will update accordingly.

How to assign licenses

For information on how to assign licenses in the Microsoft Intune admin center, see Assign Microsoft Intune licenses.

Monitor license use

Each of the Intune add-ons have their own requirements for how many licenses need to be purchased.

Next steps

Learn more about:

• Remote Help
• Microsoft Tunnel for Mobile Application Management
• Managing specialized devices with Microsoft Intune
• Intune Advanced Analytics
• Endpoint Privilege Management.
• Microsoft Tunnel for Mobile Application Management
• Remote Help
• Managing specialized devices with Microsoft Intune