For years the Microsoft 365 enterprise ladder ended at E5. It does not any more. Microsoft 365 E7 now sits above it, and because it arrived recently a lot of people still assume it is a typo or somebody confusing it with E5.
It is real, and the step up is a significant one. Here is what it contains, who it is actually for, and the question worth asking before anybody signs.
The enterprise ladder
Three tiers, in order:
- Microsoft 365 E3, a productivity licence with a security floor.
- Microsoft 365 E5, the security tier, and where the Microsoft security stack arrives as an integrated whole.
- Microsoft 365 E7, E5 plus the AI layer and the governance to run it.
Pricing differs by region, currency, agreement and term, and it moves. Price the tiers against your own agreement with your reseller rather than from an article.
What E7 adds over E5
E7 is E5 plus three things. That is the whole proposition, and it is worth knowing what each one is because they are very different products.
Microsoft 365 Copilot
The generative AI layer across Word, Excel, PowerPoint, Outlook and Teams, grounded in your own tenant content. Previously an add-on bought separately on top of E3 or E5, it is now inside the bundle.
Microsoft Agent 365
The part most people have not heard of, and the most interesting of the three. Agent 365 is a control plane for AI agents: a registry of every agent operating in your tenant, an identity for each one, and policy over what they are allowed to reach.
Microsoft Entra Suite
The identity bundle that sits above Entra ID P1 and P2. It brings together identity protection, identity governance, Internet Access, Private Access and Verified ID.
Agent 365 is the reason this tier exists
Copilot is a productivity purchase and the Entra Suite is an identity purchase. Agent 365 is the one that tells you what Microsoft thinks is coming.
It became generally available on 1 May 2026 and it is built on three ideas: observe, govern and secure.
- Observe. An agent registry and an agent map in the Microsoft 365 admin centre, showing every agent in the environment, what it does, what it can access and who owns it.
- Govern. Lifecycle management, access control and policy templates, so agents are provisioned and reviewed rather than appearing unannounced. Every agent gets its own identity.
- Secure. Entra enforces risk-based access for agents and for users acting through them. Purview applies information protection and data loss prevention to what agents can see. Defender watches agent behaviour for threats.
Importantly, it governs agents wherever they were built, including open-source frameworks and third-party platforms, not only agents made with Microsoft tooling.
The underlying assumption is that within a couple of years the average enterprise will be running agents the way it runs service accounts today: many of them, created by different teams, holding real permissions, and mostly undocumented. Agent 365 is Microsoft building the admin surface for that before it happens.
Is the bundle cheaper than the parts?
This is the right question and it has a slightly annoying answer: it depends on what you would otherwise buy.
Copilot, Agent 365 and the Entra Suite are all licensable separately on top of E5. So the honest comparison is not E5 against E7 in the abstract, it is the E7 price against the total of E5 plus whichever of the three you were actually going to buy.
Bundle in all three and E7 comes in below the sum of its parts, which is what a bundle is for. Buy E7 for Copilot alone, with no intention of running agents or adopting the Entra Suite, and you are paying for two products you will not deploy.
Price the components against your own agreement before deciding. The answer differs per organisation and it is nowhere near universal.
Who each tier is actually for
E3 suits organisations whose security is built on other products, or who buy security capability as add-ons rather than in the base licence. It is a productivity licence with a security floor.
E5 is the security tier. Defender across endpoint, identity, email and cloud apps, Entra ID P2, Purview information protection and data loss prevention, and the Microsoft security stack as an integrated whole. For most organisations taking Microsoft security seriously, this is still the right answer.
E7 suits organisations that have decided AI is going into production across the workforce and want the governance in place first. If you are rolling out Copilot broadly, and you expect teams to start building agents, the control plane stops being optional at roughly the same moment.
The trap, and it applies to every tier
There is a pattern worth naming before anybody moves up a tier, because moving up makes it worse rather than better.
Most organisations already running E5 are using a fraction of what it entitles them to. The familiar findings look like this:
- Attack surface reduction rules deployed in audit mode and never switched to enforcing
- Purview sensitivity labels published, and applied to almost nothing
- Conditional access policies carrying legacy exclusions nobody has revisited
- Defender for Cloud Apps connected, with no policies behind it
- Intune compliance policies that report a failure and remediate nothing
- Sentinel ingesting whatever was easy to connect rather than what detections need
None of that is a licensing problem, and buying a bigger licence does not touch it. An organisation that has not finished deploying E5 will not finish deploying E7 either, and will pay more for the privilege.
So the useful exercise before any upgrade conversation is an honest comparison of what you are entitled to against what is actually configured and enforcing. It is a short piece of work, and it tends to answer the licensing question by itself. Sometimes the answer is that you do not need E7 yet. Sometimes it is that you are already sitting on E5 capability worth more than the upgrade.
The short version
- E7 is real, it sits above E5, and it is E5 plus Copilot, Agent 365 and the Entra Suite.
- Agent 365 is the genuinely new idea: identity, registry and policy for AI agents, enforced through Entra, Purview and Defender.
- The bundle beats buying all three separately, and loses to buying one of them separately.
- E5 remains the right tier for most organisations taking Microsoft security seriously.
- Whichever tier you are on, the gap between entitlement and deployment is usually worth more than the next upgrade.