For most businesses with compliance or security requirements, Business Premium — it includes Intune, Defender for Business, conditional access and data protection that otherwise cost more as separate products. Frontline or basic roles may only need Business Basic. We map licenses to roles.