Microsoft 365 E7 and Agent 365: What the Frontier Suite Actually Bundles

Photo by Ed Hardie on Unsplash

Microsoft has not launched a new commercial enterprise tier of Microsoft 365 in eleven years, and the one that finally arrived on May 1, 2026 is not really an upgrade to E5. Microsoft 365 E7 is a packaging bet: that the next billable line item every CIO will care about is not productivity software at all, but the identity, security, and governance plumbing for AI agents that act on employees' behalf. The most misunderstood part of that bundle is Agent 365, which despite the name does not let you build, run, or buy AI agents.

The misconception worth clearing up first

Agent 365 is not an agent. It does not write emails, summarize meetings, or take multi-step actions on your calendar. According to SAMexpert's licensing guide, Agent 365 is a governance and security layer for AI agents and explicitly does not create them or provide compute for them. It is closer in spirit to a fleet management system than to a worker.

Think of it the way a hospital thinks about contractors. The hospital does not employ the cleaning crew, the IT consultants, or the medical device technicians, but it absolutely needs to badge them, log when they enter, restrict which wards they can access, and revoke their pass the moment the contract ends. Agent 365 is the badging office for AI agents - whether those agents were built in Copilot Studio, by an ecosystem partner, or by a developer wiring an LLM to your APIs. NPI Financial describes the model directly: each agent gets a unique Entra identity with conditional access policies and risk evaluation, covering agents from Microsoft tools, partners, and any agent registered through the API.

This matters because of a problem most IT teams have only just noticed. Sales operations spins up a Copilot Studio bot, marketing buys an agent from a SaaS vendor, an engineer experiments with a coding assistant, and within a quarter there are two hundred non-human accounts inside the tenant that nobody is tracking. Microsoft's own documentation puts it plainly: the Microsoft Learn overview says Agent 365 lets admins view all their agents in a single centralized registry covering adoption, activity, and agent health.

What Microsoft 365 E7 actually contains

The announcement on March 9, 2026 from Microsoft's corporate blog framed E7 as the first Frontier Suite, built on a layer Microsoft now calls Work IQ - an intelligence layer the company describes as enabling Copilot and agents to know how you work, with whom you work, and the content on which you collaborate. Stripped of the marketing, E7 is a four-product bundle delivered as a single SKU.

• Microsoft 365 E5, the existing top-tier productivity and security plan
• Microsoft 365 Copilot, the assistant that has been sold separately at $30 a seat
• Agent 365, the new AI agent governance layer
• Microsoft Entra Suite, Microsoft's identity, network access, and verification bundle

priced at launch per user per month, E7 is available with or without Teams, according to Microsoft's announcement. SAMexpert's breakdown of the standalone math is more revealing than the bundle price itself: E5 at $60 (from July 2026), Copilot at $30, the Entra Suite at $12, and Agent 365 at $15 totals $117 a seat. The bundle saves a customer $18 per user per month if they would have bought every component anyway.

Few customers would. Which is the point.

Why this is a packaging bet, not a discount

Microsoft has a Copilot adoption problem and is being unusually candid about it. In January 2026, Satya Nadella told investors the company had 15 million paid Copilot seats, as CNBC reported. Against the 450 million commercial Microsoft 365 subscribers Microsoft cites, that is roughly 3 percent attach. SAMexpert notes that 15 to 30 percent promotional discounts on Copilot through 2025 and 2026 did not meaningfully move adoption.

E7 changes the question a procurement team is asked. Instead of "do you want to add Copilot to your existing E5 deal," it becomes "do you want to upgrade to the new top tier that includes Copilot, agent governance, and the Entra Suite." Crimson IT calculates the incremental cost from E5 to E7 at $39 per user per month at current pricing, which buys Copilot, Agent 365, and the full Entra Suite on top of E5. That is a steeper jump than a Copilot-only add-on, but it folds two security layers into a single line item, which is friendlier to a CISO sign-off than three separate ones.

The non-obvious tell: Microsoft is willing to discount this aggressively through partners. SAMexpert's May 2026 Product Terms summary notes CSP promotions push effective E7 pricing as low as approximately $84 per user per month, with promotions expiring December 31, 2026. A vendor confident in sticker price does not run a 15 percent discount across its entire CSP channel in launch year.

What Agent 365 explained in plain controls

The practical surface of Agent 365 sits across three Microsoft products that enterprise admins already use: Entra for identity, Purview for data protection, and Defender for threat response. According to Microsoft Learn's Agent 365 overview, the Agent 365 registry in the Microsoft 365 admin center is where admins manage the lifecycle of agents while ensuring permissions, policies, and reviews are in place.

What that translates to operationally:

• Every agent gets an Entra Agent ID, the same kind of identity object a human user has, with sign-in logs and conditional access policies.
• Each agent identity is assigned a human sponsor accountable for its lifecycle decisions, per Microsoft's Entra ID Governance docs.
• Purview applies data labels and DLP rules to what the agent can read or move.
• Defender treats anomalous agent behavior the way it treats a compromised user account.

The registry tracks total registered agents, active users, runtime hours, connected platforms, and risk signals - metrics IT teams already get for managed laptops, now applied to agent fleets.

One deliberate limit deserves attention. The general availability release covers the on-behalf-of model, where an agent acts for a specific human user. Fully autonomous agentic users - agents that operate as their own first-class identities rather than borrowing a human's - remain in Frontier preview without a published GA date. The OBO model maps onto existing IAM patterns; autonomous agents are a harder audit problem, and Microsoft is keeping that complexity behind a beta gate.

M365 E7 vs E5: who should actually move

The upgrade math splits cleanly along three lines.

Organizations already paying for E5 plus Copilot at full price are the obvious candidates. They are within $9 a seat of E7 once the Entra Suite and Agent 365 are factored in, and the bundle absorbs the agent governance problem before it becomes a board-level audit finding.

Organizations on E5 without Copilot are the harder call. The $39 incremental cost Crimson IT cites is real money, and Copilot adoption inside those tenants will determine whether the bundle pays off. Microsoft's own 3 percent attach figure is not encouraging.

Organizations on E3 or below should not touch E7 yet. The July 1, 2026 price increase noted in SAMexpert's Product Terms summary raises E3 from $36 to $39 and E5 from $57 to $60, and the leap from E3 to E7 is a different magnitude of commitment than the marketing suggests.

One sweetener that has gone underreported: E7 customers can purchase every add-on previously restricted to E5 customers, including Defender for IoT, Priva, Entra ID Governance, Insider Risk Management, and eDiscovery and Audit. For organizations that built compliance programs on those add-ons, this preserves continuity rather than forcing a rebuild.

The Copilot Wave 3 piece, including Claude

E7's launch coincided with Copilot Wave 3, and the most consequential detail is not a new feature but a new model provider. Microsoft's announcement confirms Claude from Anthropic is now available in mainline Copilot chat through the Frontier program alongside OpenAI models. That is the first time a non-OpenAI frontier model has appeared in the default Copilot chat surface for enterprise customers.

The new product riding on this is Copilot Cowork, built in partnership with Anthropic. According to CNBC, Cowork handles multi-step tasks like preparing for meetings with documents and scheduling prep time, and entered research preview in March 2026 for Frontier program clients. NPI Financial cites the example workflow Microsoft uses: a single prompt of "Prepare me for a customer meeting" triggers Cowork to build a presentation, pull financial data, email relevant team members, and schedule prep time, per NPI's analysis.

The strategic read on Anthropic's inclusion: Microsoft is hedging against any single model provider, OpenAI included, becoming a single point of failure for its commercial business. We covered the broader stakes of that infrastructure logic in why AI infrastructure is now more strategic than AI models.

What the May 2026 Product Terms quietly changed

The pricing details get the headlines, but the licensing definitions matter more for anyone running a complex tenant. SAMexpert's analysis of the May 2026 Product Terms notes that the multiplexing definition was broadened to cover AI agents and automation, with new restrictions including a ban on using RPA outputs for AI training. Translation: if your robotic process automation tools are scraping Microsoft 365 data and feeding it into a model training pipeline, that is now contractually prohibited.

The other quiet change came on April 20, 2026, when Microsoft started rolling Security Copilot into every M365 E5 tenant at no additional cost, according to Crimson IT. E5 tenants receive 400 Security Compute Units per 1,000 users per month, capped at 10,000 SCUs monthly, and unused SCUs do not roll over. That is a meaningful add to the E5 value proposition right at the moment Microsoft is trying to push customers toward E7, and it complicates the upgrade math for any tenant whose security team was the main driver of the conversation.

The unanswered cost question

Here is the single largest blank in Microsoft's E7 launch: agent consumption pricing. SAMexpert's licensing guide flags that as of March 9, 2026, Microsoft had not published expected consumption costs per agent or total cost of ownership guidance. Agent 365 is sold per user. The agents themselves run on compute, and that compute is metered separately when agents are deployed at any meaningful scale.

Microsoft has invested more than $100 billion in the past year into data center infrastructure including Nvidia chips, as CNBC reported. That capex needs to be paid back through usage. Until Microsoft publishes the meter rates and the typical consumption per agent type, the headline E7 price is the floor of what any large rollout will cost, not the ceiling. Procurement teams negotiating E7 today should be modeling consumption scenarios, not just per-seat math.

For more analysis of how AI assistants and agents are reshaping enterprise software, the AI Tools section tracks the major releases, and our Software coverage follows the licensing and pricing changes that determine which of those tools actually reach desks.