Microsoft has introduced a unified Microsoft Entra Global Secure Access SKU that combines Microsoft Entra Internet Access and Microsoft Entra Private Access. According to the November 6, 2026 Partner Center announcement, the combined offer became available on November 2, 2026.
For partners, this creates a clearer proposition for customers that need to secure access to both internet and private resources. It does not mean every customer must move to the combined offer: Microsoft explicitly confirms that Internet Access and Private Access remain available individually.
What changed
The announcement introduces a new combined SKU and a dedicated Microsoft Entra Global Secure Access product page. Microsoft positions the unified offer as a simpler way to present its Security Service Edge, or SSE, capabilities through one solution.
The update addresses CSP distributors, indirect resellers, and direct bill partners, along with Scale Solution Providers, global systems integrators, and systems integrators. It is therefore relevant to both licensing conversations and security implementation practices.
The important distinction is commercial scope: customers can consider a combined offer for both access areas or continue to select an individual offer for a narrower requirement.
Why it matters
Customers often approach secure access as a business problem rather than as separate product purchases. An organization may need to review access to internet services and private applications within the same security initiative.
The combined SKU gives partners a way to organize that discussion around the customer’s full requirements. Instead of beginning with two disconnected product pitches, the partner can assess the environment and determine whether the unified offer is appropriate.
That is a positioning benefit, not evidence that every deployment will be simpler or less expensive. The announcement does not provide pricing, a savings comparison, detailed prerequisites, or a migration procedure. Partners should verify those points before making commercial or implementation commitments.
Standalone offers remain an option
Microsoft Entra Internet Access and Microsoft Entra Private Access continue to be available separately. This matters for customers with a focused need and those planning a phased deployment.
Use the following as a discovery framework:
- Both internet and private-resource access are in scope: assess the unified Global Secure Access offer against the customer’s environment and existing entitlements.
- The immediate need is internet access: consider whether standalone Internet Access meets that requirement.
- The immediate need is private-resource access: assess standalone Private Access against the relevant applications and access needs.
These are starting points, not definitive licensing recommendations. Current terms, existing licenses, technical requirements, and deployment scope still need to be checked. A broader SKU is not automatically the right choice merely because it is new.
Existing customers: no automatic migration is announced
Microsoft describes availability of a new SKU, not a mandatory transition program. The announcement does not state that existing subscriptions will automatically migrate, that configurations will change, or that current customers must replace their licenses.
Partners should therefore avoid presenting November 2 as a migration deadline. For an existing deployment, begin with an entitlement and requirements review: what does the customer own, what is deployed, and has the scope expanded to include both access areas?
If the combined offer appears suitable, confirm the available subscription-change path and its commercial implications before requesting approval. This announcement alone is not sufficient support for promising a seamless switch or a lower invoice.
Recommended partner next steps
Update sales guidance. Explain the unified offer while preserving a clear standalone path. Position the customer’s requirements first, rather than treating the new SKU as a compulsory replacement.
Review active opportunities. Identify accounts already discussing both internet and private-resource access. Assess whether the unified offer makes those proposals clearer without expanding scope beyond an established need.
Validate before quoting. Confirm pricing, prerequisites, applicable availability, and potential overlap with existing entitlements through current Microsoft or distributor resources. The announcement does not supply those details.
Separate purchase from deployment. A combined commercial offer does not remove the need for technical discovery. Document the intended users, resources, existing controls, and operational requirements before agreeing on implementation scope.
Define services precisely. Microsoft highlights assessment, integration, deployment, and ongoing management as potential partner opportunities. Translate those into explicit deliverables, such as a scoped assessment, agreed design, controlled pilot, acceptance checks, or operational handover. These are suggested engagement components, not a Microsoft-mandated delivery model.
Bottom line
The unified Microsoft Entra Global Secure Access SKU gives partners another way to serve customers that need both Internet Access and Private Access. The continued availability of standalone offers preserves flexibility for narrower requirements.
The right response is better discovery and proposal design, not an indiscriminate migration campaign. Lead with access requirements, verify licensing details, and distinguish the simpler product story from the implementation work needed to deliver a suitable solution.