Microsoft announced a new product bundle today, March 9th, and it’s worth examining in technical detail. In this blog, we discuss what E7 is for the layperson, what it means for technical decision makers, and in what cases E7 makes sense.
Some of us have been expecting an E7 bundle for years, and it finally happened – Microsoft announced that M365 E7 is coming May 1st, 2026, and it includes several new features.
What is in E7?
Two of these three components are purely AI-related, while the M365 E5 tile also includes Entra Suite attached (which is not in E5 by default).
Let’s break down each component. When you buy M365 E7, you get all the features of Microsoft 365 E5, plus:
- Microsoft 365 Copilot, Microsoft’s custom-tailored AI service for M365 functions. M365 Copilot has come a long way, now including actions, built-in automations, wide extensibility and deep customizability. Our Copilot customers have automated key business workflows using AI for individuals and org-wide uses, and now refuse to live without it.
- Agent 365, a brand-new security and governance solution for AI (including Copilot and beyond). Agent 365 includes the ability to monitor, protect, and govern Copilot, ChatGPT, and much more.
- Entra Suite, Microsoft’s premier Identity package. This includes several features:
- Entra Identity Governance, automating Joiner/Mover/Leaver scenarios, access packages, access reviews, and detailed reporting for audits. Our customers use Entra Suite to replace SailPoint, Saviynt, Okta Workflows, and more.
- Entra Private Access, replacing a VPN using SASE features, or it can work alongside your VPN to govern with greater security. This gives you the ability to provision access to on-premises apps, protect them with MFA, prevent access, etc.
- Entra Internet Access, providing Secure Web Gateway (SWG) features to protect internet-facing assets. Critically, this function provides a great way to protect against unwanted GenAI misuse of your data by limiting what can be done with your company data on public AI services.
- Verified ID, the ability to require a facial verification against a government ID for password resets, plus the ability to integrate this into your custom apps.
Why should I get E7?
E7 is a good idea if your org matches one of the following scenarios:
- You want an end-to-end agent security strategy. With E7, you can secure agents at all levels and perspectives – data, identity, OAuth permissions, VPN, device, personally-owned, company-owned, and much more. E7 includes every security feature Microsoft offers to secure both agents and end-users.
- You’re already a Copilot customer, and you need to secure your agent sprawl and permissions sprawl. This is most customers today. Although Microsoft offers Agent 365 by itself, E7 is a better deal for both price and capability.
- You’re already a Copilot customer and an Entra Suite customer. If you already own two of these solutions today, you’re effectively getting Agent 365 for no cost by switching to E7.
Is the $99/mo price worth it?
Yes. Customers who have or want Copilot will need Agent 365 for comprehensive agent protection. Even if you just want Copilot and Agent 365, the new E7 bundle will save another $3, and you effectively get Entra Suite for free.
Copilot brings massive value to our clients, but securing it is not an easy task. E7 features provide a total suite of tools to get you to fully-governed, tightly-secured agent use.
At current prices, individual components of E7 together would have cost $114/mo total, but Microsoft is providing these at $99/mo together.