Agent 365 Licensing, Editions & Prerequisites

It is tempting to skip licensing as procurement’s problem. Resist that here, because with Agent 365 the license tier is the feature set: the difference between “we can list our agents” and “we can watch, police, and lock down every tool call” is a licensing line. Knowing the tiers up front stops the common disappointment of expecting a capability that turns out to sit one edition higher.

1 · Why licensing is worth understanding first

Most products put nearly all their features in the box and let licensing decide only how many people can use them. Agent 365 is different: it deliberately gates which capabilities you get by tier. The base inventory-and-governance is broad and available widely, but the capabilities that turn Agent 365 into a genuine security control plane — deep observability, custom policy, tenant-wide tool control — are reserved for the higher editions. So a plan built on the wrong assumption (“we’ll just turn on monitoring”) can stall. Understanding the map now avoids that.

2 · How Agent 365 is sold: standalone, E7, and per-user

Three facts define how you acquire it:

And the timing: Agent 365 reached general availability (GA — full production release for all eligible customers) for the Commercial segment on May 1, 2026. At launch, a set of pre-integrated partner agents can be deployed directly from the Microsoft 365 admin center, so an organisation can start governing real third-party agents from day one.

3 · Prerequisites: E5, and at least one qualifying license

Agent 365 does not stand entirely alone; it leans on a security foundation of Entra, Purview, Defender, and Intune. Two prerequisites matter:

• Microsoft 365 E5 as the recommended base. Microsoft states Agent 365 “works best when using Microsoft E5 as a pre-requisite.” E5 is the enterprise edition that already carries the advanced Entra, Purview, and Defender capabilities Agent 365 extends to agents — so with E5 in place, the security pillars have something rich to build on.
• At least one qualifying license in the tenant. Before Agent 365 can be used, at least one user must hold a qualifying Agent 365 license. This is what activates the control plane for the organisation.

The practical reading: if an organisation is already on E5, adopting Agent 365 is an incremental step; if it is on a lower edition, expect the E5-class security foundation to be part of the conversation.

4 · What every plan gets versus what needs E7 or Agent 365

This is the heart of the article. Microsoft’s published feature-availability table draws a clear line. Read it as two tiers: a base that comes with ordinary Microsoft 365 plans, and a premium set that requires Microsoft E7 or Agent 365.

The pattern is consistent: seeing and basically governing agents is broadly available; the deep observability, fine-grained policy, and tool control that make Agent 365 a true control plane require the top tiers. If your goal is inventory and cleanup of sprawl, the base tier already helps enormously. If your goal is a policed, monitored agent estate, budget for E7 or Agent 365.

5 · Planning who to license

Because Agent 365 is per user, a natural planning question is “who exactly needs a license?” The general principle is to license the people whose work the agents support — the users on whose behalf agents act — and to confirm the E5-class security foundation is present. Microsoft’s FastTrack program offers remote guidance for adopting Agent 365’s premium capabilities, which is a useful signal that rollout is expected to be a planned exercise, not a single switch. Rollout planning is a deeper subject on its own; here the takeaway is only that tier and coverage should be matched to the depth of governance you actually intend to operate.

6 · Glossary — every short-form term, spelled out

License (per user)

A right to use a service, here counted per person rather than per agent; you license the users the agents support.

Standalone subscription

Agent 365 bought as an add-on on top of an eligible Microsoft 365 subscription.

Microsoft 365 E5

An enterprise Microsoft 365 edition carrying advanced Entra, Purview, and Defender capabilities; the recommended prerequisite for Agent 365.

Microsoft 365 E7 / Microsoft Enterprise 7

The enterprise edition that includes Agent 365 and unlocks its premium capabilities.

General availability (GA)

The point at which a product is fully released for production use by all eligible customers; Agent 365 reached this for Commercial on May 1, 2026.

Feature availability

Which capabilities are included at each licensing tier; for Agent 365 this varies significantly by tier.

Policy template

A reusable set of customised controls applied to agents; a premium (E7 / Agent 365) capability.

Observability

The ability to monitor agent activity through visualization and telemetry; a premium capability.

MCP server (Model Context Protocol server)

A governed source of tools and data an agent can call; premium tiers let admins control which ones agents may use tenant-wide.

Graph API

A programming interface for reaching Microsoft 365 data and actions in code; premium tiers expose the agent registry through it.

Access package (Entra)

A defined bundle of permissions in Microsoft Entra used to scope what an agent may reach; a premium capability.

FastTrack

Microsoft’s program offering remote deployment guidance, including for Agent 365 premium capabilities.

Tenant

An organisation’s own dedicated instance of a cloud service; Agent 365 activates once at least one user in it holds a qualifying license.