Microsoft Sentinel
Architecture and deploymentOptimize Costs with a Prepurchase Plan
In brief
The Microsoft Sentinel prepurchase plan article clarifies its 200 GB/day pricing example and adds a warning that purchases are final and cannot be canceled or exchanged. It also includes minor wording, formatting, and metadata updates.
What Defender admins need to know
Plan prepurchase purchases carefully because cancellations and exchanges aren't supported.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Optimize Microsoft Sentinel costs with a pre-purchase plan
Save on your Microsoft Sentinel analytics tier costs when you buy a pre-purchase plan. Pre-purchase plans are commit units (CUs) bought at discounted tiers in your purchasing currency for a specific product. The more you buy, the greater the discount. Purchased CUs pay down qualifying costs in US dollars (USD). So, if Microsoft Sentinel generates a retail cost of $100, then 100 Microsoft Sentinel CUs (SCUs) are consumed.
Your Microsoft Sentinel pre-purchase plan automatically uses your SCUs to pay for eligible analytics tier costs during its one-year term or until the SCUs run out. Your pre-purchase plan SCUs start paying for your Microsoft Sentinel workspace costs without having to redeploy or reassign the plan. By default, plans are configured to renew at the end of the one year term.
Prerequisites
To buy a pre-purchase plan, you must have one of the following Azure subscriptions and roles:
- For an Azure subscription, the owner role or reservation purchaser role is required.
- For an Enterprise Agreement (EA) subscription, the Reserved Instances policy option must be enabled. To enable that policy option, you must be an EA administrator of the subscription.
- For a Cloud Solution Provider (CSP) subscription, follow one of these articles:
Determine the right size to buy
Pre-purchase plans work well alongside Microsoft Sentinel commitment tiers. To get started, estimate your expected analytics tier ingestion volume and select the right commitment tier. Estimating your expected volume and selecting the right commitment tier helps you determine the appropriate size for your pre-purchase plan. Each pre-purchase plan has a one-year term.
For example, suppose you choose a 200 GB/day commitment tier. With simplified pricing, the estimated monthly cost for both data ingestion and analysis is $20,000 USD—a 39% savings compared to the pay-as-you-go rate for the same volume.
A $100,000 USD pre-purchase plan covers five months of the 200 GB/day commitment tier but is valid for paying Microsoft Sentinel costs for 12 months. The pre-purchase plan is bought at a 22% discount for $78,000 USD.
The savings from the 200 GB/day commitment tier and the pre-purchase plan combine. The original pay-as-you-go price for five months of 200 GB/day ingestion and analysis costs is, for example, about $160,000 USD. With an accurate commitment tier and a pre-purchase plan, the cost is reduced to $78,000 USD for a combined savings of over 51%. Since the example plan is depleted after just five months, the best way to ensure continued savings is to purchase more SCUs with another plan.
For more information, see the following articles:
All Microsoft Sentinel pricing tiers qualify for Microsoft Sentinel pre-purchase plans. From your Microsoft Sentinel bill, these costs are the entries with the Sentinel service name in the invoice details. These costs don't include Azure Monitor tiers, retention, restore, and search costs. Eligible Microsoft Sentinel usage is deducted from the prepurchased Microsoft Sentinel CUs automatically.
For more information on how to view Microsoft Sentinel simplified or classic pricing tiers in your invoice details, see Understand your Microsoft Sentinel bill.
Purchase Microsoft Sentinel commit units
Purchase Microsoft Sentinel pre-purchase plans in the Azure portal reservationsPurchase Microsoft Sentinel pre-purchase plans in the Azure portal reservations
Go to the Azure portal home page.
Navigate to the Reservations service.
On the Purchase reservations page, select Microsoft Sentinel Pre-Purchase Plan.
:::image type="content" source="media/sentinel-plan.png" alt-text="Screenshot showing Microsoft Sentinel pre-purchase plan." lightbox="media/sentinel-plan.png":::On the Select the product you want to purchase page, select a subscription. Use the Subscription list to select the subscription used to pay for the reserved capacity. The payment method of the subscription is charged the upfront costs for the reserved capacity. Charges are deducted from the enrollment's Azure Prepayment (previously called monetary commitment) balance or charged as overage.
Select a scope.
- Single resource group scope
-: Applies the reservation discount to the matching resources in the selected resource group only. - Single subscription scope
-: Applies the reservation discount to the matching resources in the selected subscription. - Shared scope
-: Applies the reservation discount to matching resources in eligible subscriptions that are in the billing context. For Enterprise Agreement customers, the billing context is the enrollment. - Management group
-: Applies the reservation discount to the matching resource in the list of subscriptions that are a part of both the management group and billing scope.
- Single resource group scope
Select how many Microsoft Sentinel commit units you want to purchase.
:::image type="content" source="media/sentinel-pre-purchase-plan.png" alt-text="Screenshot showing Microsoft Sentinel pre-purchase plan discount tiers and their term lengths." lightbox="media/sentinel-pre-purchase-plan.png":::
Related content
To learn more about Azure Reservations, see the following articles:
- What are Azure Reservations?
- Manage Reservations for Azure resources
- Plan costs and understand Microsoft Sentinel pricing and billing.
To learn more about Microsoft Sentinel costs, see Plan costs and understand Microsoft Sentinel pricing and billing.
@@ -1,30 +1,33 @@ ----title: Optimize costs with a prepurchase plan+title: Optimize Costs with a Prepurchase Plan titleSuffix: Microsoft Sentinel description: Learn how to save costs and buy a Microsoft Sentinel prepurchase plan ms.author: edbaynash author: EdB-MSFT ms.reviewer: daniha ms.topic: how-to-ms.date: 07/07/2025+ms.date: 07/01/2026 #customerintent: As a SOC administrator or a billing specialist, I want to know how to buy a prepurchase plan and whether commit units will benefit us financially.+ai-usage: ai-assisted+ms.custom: msecd-doc-authoring-1016 --- # Optimize Microsoft Sentinel costs with a pre-purchase plan -Save on your Microsoft Sentinel analytics tier costs when you buy a pre-purchase plan. Pre-purchase plans are commit units (CUs) bought at discounted tiers in your purchasing currency for a specific product. The more you buy, the greater the discount. Purchased CUs pay down qualifying costs in US dollars (USD). So, if Microsoft Sentinel generates a retail cost of $100, then 100 Microsoft Sentinel CUs (SCUs) are consumed. +Save on your Microsoft Sentinel analytics tier costs when you buy a pre-purchase plan. Pre-purchase plans are commit units (CUs) bought at discounted tiers in your purchasing currency for a specific product. The more you buy, the greater the discount. Purchased CUs pay down qualifying costs in US dollars (USD). So, if Microsoft Sentinel generates a retail cost of $100, then 100 Microsoft Sentinel CUs (SCUs) are consumed. Your Microsoft Sentinel pre-purchase plan automatically uses your SCUs to pay for eligible analytics tier costs during its one-year term or until the SCUs run out. Your pre-purchase plan SCUs start paying for your Microsoft Sentinel workspace costs without having to redeploy or reassign the plan. By default, plans are configured to renew at the end of the one year term. ## Prerequisites To buy a pre-purchase plan, you must have one of the following Azure subscriptions and roles:+ - For an Azure subscription, the owner role or reservation purchaser role is required. - For an Enterprise Agreement (EA) subscription, the [**Reserved Instances** policy option](/azure/cost-management-billing/manage/direct-ea-administration#view-and-manage-enrollment-policies) must be enabled. To enable that policy option, you must be an EA administrator of the subscription. - For a Cloud Solution Provider (CSP) subscription, follow one of these articles:- - [Buy Azure reservations on behalf of a customer](/partner-center/customers/azure-reservations-buying)- - [Allow the customer to buy their own reservations](/partner-center/customers/give-customers-permission)+ - [Buy Azure reservations on behalf of a customer](/partner-center/customers/azure-reservations-buying)+ - [Allow the customer to buy their own reservations](/partner-center/customers/give-customers-permission) >[!NOTE] > Microsoft Sentinel Commit Units are different from Security Compute Units in Security Copilot. Customers can't use Microsoft Sentinel Commit Units to run Copilot workloads and vice versa.@@ -32,22 +35,23 @@ To buy a pre-purchase plan, you must have one of the following Azure subscriptio ## Determine the right size to buy -Pre-purchase plans work well alongside Microsoft Sentinel commitment tiers. To get started, estimate your expected analytics tier ingestion volume and select the right commitment tier. This helps you determine the appropriate size for your pre-purchase plan. Each pre-purchase plan has a one-year term.+Pre-purchase plans work well alongside Microsoft Sentinel commitment tiers. To get started, estimate your expected analytics tier ingestion volume and select the right commitment tier. Estimating your expected volume and selecting the right commitment tier helps you determine the appropriate size for your pre-purchase plan. Each pre-purchase plan has a one-year term. For example, suppose you choose a 200 GB/day commitment tier. With simplified pricing, the estimated monthly cost for both data ingestion and analysis is $20,000 USD—a 39% savings compared to the pay-as-you-go rate for the same volume. -A $100,000 USD pre-purchase plan covers five months of that commitment tier but is valid for paying Microsoft Sentinel costs for 12 months. The pre-purchase plan is bought at a 22% discount for $78,000 USD. +A $100,000 USD pre-purchase plan covers five months of the 200 GB/day commitment tier but is valid for paying Microsoft Sentinel costs for 12 months. The pre-purchase plan is bought at a 22% discount for $78,000 USD. -The savings for the commitment tier and the pre-purchase plan combine. The original pay-as-you-go price for five months of 200 GB/day ingestion and analysis costs is, for example, about $160,000 USD. With an accurate commitment tier and a pre-purchase plan, the cost is reduced to $78,000 USD for a combined savings of over 51%. Since the example plan is depleted after just five months, the best way to ensure continued savings is to purchase more SCUs with another plan.+The savings from the 200 GB/day commitment tier and the pre-purchase plan combine. The original pay-as-you-go price for five months of 200 GB/day ingestion and analysis costs is, for example, about $160,000 USD. With an accurate commitment tier and a pre-purchase plan, the cost is reduced to $78,000 USD for a combined savings of over 51%. Since the example plan is depleted after just five months, the best way to ensure continued savings is to purchase more SCUs with another plan. For more information, see the following articles:+ - [Switch to simplified pricing](enroll-simplified-pricing-tier.md) - [Set or change commitment tier](billing-reduce-costs.md#set-or-change-pricing-tier) >[!IMPORTANT] > The prices mentioned are for the purposes of example purposes only. To determine the latest commitment tier prices, see [Microsoft Sentinel pricing](https://azure.microsoft.com/pricing/details/microsoft-sentinel/). -All Microsoft Sentinel pricing tiers qualify for Microsoft Sentinel pre-purchase plans. From your Microsoft Sentinel bill, these costs are the entries with the **Sentinel** service name in the invoice details. These costs don't include Azure Monitor tiers, retention, restore, and search costs. Eligible Microsoft Sentinel usage is deducted from the prepurchased Microsoft Sentinel CUs automatically. +All Microsoft Sentinel pricing tiers qualify for Microsoft Sentinel pre-purchase plans. From your Microsoft Sentinel bill, these costs are the entries with the **Sentinel** service name in the invoice details. These costs don't include Azure Monitor tiers, retention, restore, and search costs. Eligible Microsoft Sentinel usage is deducted from the prepurchased Microsoft Sentinel CUs automatically. For more information on how to view Microsoft Sentinel simplified or classic pricing tiers in your invoice details, see [Understand your Microsoft Sentinel bill](billing.md#understand-your-microsoft-sentinel-bill). @@ -55,18 +59,21 @@ Keep in mind, Microsoft Sentinel integrates with many other Azure services that ## Purchase Microsoft Sentinel commit units +> [!WARNING]+> Microsoft Sentinel Pre-Purchase Plan purchases are final. Cancellations and exchanges aren't supported.+ Purchase Microsoft Sentinel pre-purchase plans in the [Azure portal reservations](https://portal.azure.com/#view/Microsoft_Azure_Reservations/ReservationsBrowseBlade/productType/Reservations). -1. Go to the [Azure portal](https://portal.azure.com)+1. Go to the [Azure portal home page](https://portal.azure.com). 1. Navigate to the **Reservations** service. 1. On the **Purchase reservations page**, select **Microsoft Sentinel Pre-Purchase Plan**. :::image type="content" source="media/sentinel-plan.png" alt-text="Screenshot showing Microsoft Sentinel pre-purchase plan." lightbox="media/sentinel-plan.png"::: 1. On the **Select the product you want to purchase** page, select a subscription. Use the **Subscription** list to select the subscription used to pay for the reserved capacity. The payment method of the subscription is charged the upfront costs for the reserved capacity. Charges are deducted from the enrollment's Azure Prepayment (previously called monetary commitment) balance or charged as overage. 1. Select a scope.- - **Single resource group scope** - Applies the reservation discount to the matching resources in the selected resource group only.- - **Single subscription scope** - Applies the reservation discount to the matching resources in the selected subscription.- - **Shared scope** - Applies the reservation discount to matching resources in eligible subscriptions that are in the billing context. For Enterprise Agreement customers, the billing context is the enrollment.- - **Management group** - Applies the reservation discount to the matching resource in the list of subscriptions that are a part of both the management group and billing scope.+ - **Single resource group scope**: Applies the reservation discount to the matching resources in the selected resource group only.+ - **Single subscription scope**: Applies the reservation discount to the matching resources in the selected subscription.+ - **Shared scope**: Applies the reservation discount to matching resources in eligible subscriptions that are in the billing context. For Enterprise Agreement customers, the billing context is the enrollment.+ - **Management group**: Applies the reservation discount to the matching resource in the list of subscriptions that are a part of both the management group and billing scope. 1. Select how many Microsoft Sentinel commit units you want to purchase. :::image type="content" source="media/sentinel-pre-purchase-plan.png" alt-text="Screenshot showing Microsoft Sentinel pre-purchase plan discount tiers and their term lengths." lightbox="media/sentinel-pre-purchase-plan.png":::@@ -88,8 +95,6 @@ Cancel and exchange operations aren't supported for **Microsoft Sentinel Pre-Pur ## Related content -To learn more about Azure Reservations, see the following articles: - [What are Azure Reservations?](/azure/cost-management-billing/reservations/save-compute-costs-reservations) - [Manage Reservations for Azure resources](/azure/cost-management-billing/reservations/manage-reserved-vm-instance)--To learn more about Microsoft Sentinel costs, see [Plan costs and understand Microsoft Sentinel pricing and billing](billing.md).+- [Plan costs and understand Microsoft Sentinel pricing and billing](billing.md).