Which license is required for just-in-time (JIT) VM access to manage Azure Virtual Desktop session host VMs while minimizing cost?

Microsoft Defender for Servers Plan 2 is correct because it includes Microsoft Defender for Cloud's enhanced security features, which are necessary for Just-in-Time (JIT) VM access. JIT VM access reduces the attack surface by only opening management ports when needed, and this functionality is part of Defender for Cloud's advanced threat protection. Enterprise Mobility + Security E5 and Microsoft 365 E5 are comprehensive suites that include many security features, but JIT VM access specifically falls under the Defender for Cloud capabilities, which are best accessed via Defender for Servers Plan 2 for VMs. Microsoft Defender for Servers Plan 1 offers foundational security but lacks the advanced features like JIT VM access.