Typically engaged when: E5 licences already owned but unconfigured.
IT Director / CISO
E5 licences already owned but unconfigured
Project engagement
Defender plans vary; most require E5 or standalone
Very common US situation: the licence is paid for and the product is not deployed.