Azure active directory premium 1 For Business
user and group management
on-premises directory synchronization
basic reports
self-service password change for cloud users
single sign-on across Azure, Microsoft 365, and many popular SaaS apps
lets your hybrid users access both on-premises and cloud resources
supports advanced administration, such as dynamic groups, self-service group management, Microsoft Identity Manager, and cloud write-back capabilities