TLDR
- Microsoft 365 E7 launches May 1, 2026 at $99 per user per month — bundling E5, Copilot, Entra Suite, and Agent 365 into a single license.
- The headline addition is agent governance. If your organisation is deploying AI agents at scale, E7 gives you the control plane to observe, secure, and manage them.
- At $99, E7 saves $18 per user compared to buying the four components separately ($117). Whether that matters depends entirely on whether you actually need all four.
What Is Microsoft 365 E7?
Microsoft 365 E7, officially branded "The Frontier Suite," is Microsoft's new top-tier enterprise subscription. Announced on March 9, 2026 and generally available from May 1, it positions itself as the productivity platform for what Microsoft calls the "human-led, agent-operated enterprise."
In plain terms: E7 takes everything in E5 and adds the AI and identity layers that Microsoft has been selling as separate add-ons. It is the first license tier designed from the ground up to address a world where AI agents operate alongside human employees.
What Is Included in E7
E7 bundles four components into a single SKU:
1. Microsoft 365 E5 — The Foundation
Everything you already know from E5 carries forward:
- Office apps — Word, Excel, PowerPoint, Outlook, OneNote
- Collaboration — Exchange Online, SharePoint, OneDrive, Teams (optional)
- Security — Microsoft Defender for Office 365, Endpoint, Identity, and Cloud Apps
- Compliance — Microsoft Purview for data loss prevention, information protection, insider risk, and eDiscovery
- Device management — Microsoft Intune
- Identity — Entra ID Plan 2
- Analytics — Power BI Pro
If you are currently on E5, nothing disappears. E7 is additive.
2. Microsoft 365 Copilot — Embedded AI
Copilot is Microsoft's AI assistant embedded across the 365 suite. In the E7 bundle it includes Copilot Cowork, a new capability built in collaboration with Anthropic that handles long-running, multi-step tasks — scheduling recurring emails, preparing meeting documents, orchestrating workflows that unfold over time rather than responding to a single prompt.
For security teams, Copilot's value is in accelerating triage, summarising incidents, and drafting communications. With E7, it is no longer a $30 add-on decision — it is simply part of the stack.
3. Microsoft Entra Suite — Identity and Zero Trust
This is where the security value gets interesting. E5 includes Entra ID Plan 2. E7 goes further with the full Entra Suite, which adds:
- Entra Private Access — A modern VPN replacement for accessing internal applications without exposing your network
- Entra Internet Access — A secure web gateway (SWG) for controlling outbound traffic
- Entra ID Governance — Lifecycle workflows for joiners, movers, and leavers with automated access reviews
- Entra Verified ID — Decentralised identity verification for onboarding and third-party trust
For organisations pursuing a Zero Trust architecture, this is significant. Private Access and Internet Access together provide a Microsoft-native Secure Access Service Edge (SASE) layer — reducing reliance on third-party VPN and proxy solutions.
4. Agent 365 — The AI Governance Control Plane
This is the genuinely new component and the strategic reason E7 exists. Agent 365 ($15 per user standalone) gives IT and security leaders a single place to:
- Discover and inventory all AI agents operating across the organisation
- Assign identities to agents and manage their data access
- Apply governance policies consistently across the agent lifecycle
- Monitor behaviour — usage patterns, anomalies, and risk indicators
- Enforce security controls — ensuring agents operate within defined boundaries
Think of it as what Intune does for devices and Entra does for users — but for AI agents. As organisations move from experimenting with Copilot to deploying autonomous agents in production, the governance gap becomes a real security risk. Agent 365 is Microsoft's answer to that gap.
Pricing Breakdown: Is E7 Worth It?
Here is the maths:
| Component | Standalone Price | |---|---| | Microsoft 365 E5 | $60/user/month | | Microsoft 365 Copilot | $30/user/month | | Microsoft Entra Suite | $12/user/month | | Agent 365 | $15/user/month | | Total a la carte | $117/user/month | | Microsoft 365 E7 | $99/user/month | | Bundle saving | $18/user/month (15%) |
Note that E5 is moving from $57 to $60 per user per month on July 1, 2026 — a 5.3% increase that folds in several current add-ons.
The saving is real, but only if you need all four components. If you are on E5 and only want Copilot, the add-on route at $30 is still cheaper than jumping to E7. The bundle economics only work when you need at least three of the four pieces.
E5 vs E7: What Actually Changes for Security Teams
| Capability | E5 | E7 | |---|---|---| | Defender (Email, Endpoint, Identity, Cloud Apps) | Included | Included | | Purview (DLP, Information Protection, Insider Risk) | Included | Included | | Intune (Device Management) | Included | Included | | Entra ID Plan 2 | Included | Included | | Entra Private Access (VPN replacement) | Not included | Included | | Entra Internet Access (Secure Web Gateway) | Not included | Included | | Entra ID Governance (Lifecycle Workflows) | Not included | Included | | Entra Verified ID | Not included | Included | | Microsoft 365 Copilot | Add-on ($30) | Included | | Agent 365 (AI Governance) | Not available | Included | | Copilot Cowork (Multi-step AI) | Not available | Included |
The core Defender, Purview, and Intune capabilities are identical. The delta is in identity (Entra Suite), AI assistance (Copilot), and AI governance (Agent 365).
Who Should Consider E7
Strong Fit
- Organisations deploying AI agents in production. If you are moving beyond Copilot experimentation into autonomous agent workflows, Agent 365 fills a governance gap that currently does not have a clean alternative.
- E5 customers already paying for Copilot and Entra add-ons. If you are already at $90+ per user with add-ons, the consolidation to E7 at $99 simplifies licensing and saves money.
- Zero Trust programmes that need SASE. Entra Private Access and Internet Access provide a Microsoft-native alternative to third-party VPN and SWG products. If you are already invested in the Microsoft security stack, this reduces integration complexity.
Wait and See
- E5 customers without Copilot adoption. If your organisation has not yet rolled out Copilot or has limited AI agent usage, the incremental $39 per user is hard to justify today.
- Organisations with mature third-party identity and SASE stacks. If you have invested in Okta, Zscaler, or similar — switching to Entra Suite for the sake of the E7 bundle may not make operational sense.
- Small to mid-sized organisations. The E7 value proposition is strongest for large enterprises with complex identity estates and active AI deployment. Smaller organisations may find E5 plus selective add-ons more cost-effective.
Practical Recommendations for Security Leaders
1. Audit your current spend. Before evaluating E7, map your existing Microsoft licensing. If you are on E5 plus Copilot plus Entra add-ons, calculate whether E7 consolidation saves money.
2. Assess your AI agent maturity. Agent 365 is the differentiator. If your organisation is not deploying AI agents — or is only using Copilot in a limited capacity — the governance layer has no workload to govern.
3. Evaluate Entra Suite against your current identity stack. Entra Private Access and Internet Access are compelling for Microsoft-native shops. But if you have a functioning SASE deployment with another vendor, migration cost and effort may outweigh the licensing savings.
4. Plan for July 2026 pricing changes. E5 moves to $60 on July 1. Factor this into your comparison. The gap between E5 and E7 narrows slightly, but the gap between E5-plus-add-ons and E7 becomes more favourable for the bundle.
5. Start with Agent 365 standalone if needed. Agent 365 is available separately at $15 per user. If AI governance is your primary gap but you do not need the full E7 bundle, this is the lower-risk entry point.
The Bigger Picture
Microsoft 365 E7 is not just a licensing change. It signals where Microsoft sees the enterprise heading — an environment where AI agents are first-class participants in the workforce, requiring the same governance, identity management, and security oversight that we apply to human users today.
For security leaders, this creates both opportunity and obligation. The opportunity is a unified platform that extends your existing security controls to AI workloads. The obligation is that agent governance is no longer optional — if your organisation is deploying agents, you need a strategy for securing them, and Microsoft is making it clear that they intend to be the default answer.
Whether E7 is the right vehicle for your organisation depends on your AI maturity, your existing stack, and your licensing economics. But the questions it forces you to ask — about agent governance, identity architecture, and AI security posture — are questions every security leader should be working through right now.
Frequently Asked Questions
When is Microsoft 365 E7 available?
Microsoft 365 E7 is generally available from May 1, 2026. It can be purchased through Enterprise Agreements, Cloud Solution Provider partners, and Web Direct.
Can I buy E7 without Microsoft Teams?
Yes. Like E5, Microsoft 365 E7 is available with or without Teams, reflecting ongoing regulatory requirements in some markets.
Does E7 replace E5?
No. E5 remains available. E7 is a new tier above E5, not a replacement. Organisations can continue on E5 and add components individually if that better suits their needs.
What is Agent 365?
Agent 365 is Microsoft's governance control plane for AI agents. It provides discovery, identity management, policy enforcement, behaviour monitoring, and security controls for AI agents operating across the enterprise. It is available standalone at $15 per user per month or as part of E7.
Is the E7 bundle discount worth it?
At $99 per user, E7 saves $18 per user compared to buying E5, Copilot, Entra Suite, and Agent 365 separately ($117). The saving is meaningful at scale but only applies if you need all four components.
Found this helpful? Share it.