🪲CIS.M365.1.1.1 and CIS.M365.1.1.3 returning requirement for P2 license

[drkmccy]

Not sure if this is because it being a tenant with GDAP relationships to an MSP which has P2?

`Invoke-MgGraphRequest: C:\Program Files\PowerShell\Modules\Maester\2.0.0\internal\Invoke-MtGraphRequestCache.ps1:49
Line 49 | … $results = Invoke-MgGraphRequest -Method $Method -Uri $Uri -Headers
GET https://graph.microsoft.com/v1.0/roleManagement/directory/roleEligibilityScheduleInstances?$filter=roleDefinitionId+eq+%2762e90394-69f5-4237-9190-012177145e10%27&$expand=principal

HTTP/2.0 400 Bad Request Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 request-id: bcee6ed2-437a-4b54-bbbf-d5d615099cb6 client-request-id: 66003934-6d5c-4370-b1f5-93acdc46f57e x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"North Europe","Slice":"E","Ring":"4","ScaleUnit":"001","RoleInstance":"DU2PEPF00058FF6"}} Date: Thu, 22 Jan 2026 09:07:22 GMT Content-Type: application/json

{"error":{"code":"AadPremiumLicenseRequired","message":"The tenant needs to have Microsoft Entra ID P2 or Microsoft Entra ID Governance license.",

"innerError":{"date":"2026-01-22T09:07:22","request-id":"bcee6ed2-437a-4b54-bbbf-d5d615099cb6","client-request-id":"66003934-6d5c-4370-b1f5-93acdc46f57e"}}}`