Which plan includes what? 12 Microsoft 365 features and where they live
By Michal Lampe Sørensen · 6 min read · 10 May 2026
Last updated: 1 October 2026
Verified against Microsoft Learn, October 2026
Contents
In short
Conditional Access requires Entra ID P1, found in Business Premium ($22) and above, but also in the frontline plans F1 ($3) and F3 ($10). Basic DLP is in E3, Endpoint DLP only in E5. Copilot is only included in E7. Otherwise it is $30/mo, or $21 as Copilot Business on a Business plan under 300 users. Here are 12 of the most sought-after features with exact plan and price.
Security features: Who has what?
Conditional Access. Requires Entra ID P1. Included in: Business Premium ($22), E3 ($39), E5 ($60), E7 ($99) and the frontline plans F1 ($3) and F3 ($10). The cheapest plan with desktop Office is Business Premium; F1 and F3 are cheaper but may only be assigned to frontline workers. Not available in Business Basic or Business Standard. Without Conditional Access you only have Security Defaults, all-or-nothing MFA with no granular control.
Defender for Endpoint. Comes in two tiers. P1 (basic endpoint protection) is in Business Premium and E3. P2 (advanced with automated investigation and response) is only in E5 and E7. Business Premium has its own variant: Defender for Business, a simplified version for up to 300 users.
Defender XDR. Microsoft's unified detection platform that correlates signals from endpoints, email, identity and cloud apps. Only in E5 ($60) and E7 ($99). Not available in E3, not even as an add-on.
Compliance and data protection
DLP (Data Loss Prevention). Basic DLP for Exchange and SharePoint is in Business Premium ($22) and E3 ($39). Endpoint DLP covering local files, clipboard and print requires E5 ($60). Many organizations think they have DLP with E3, and they do, but only for cloud data.
eDiscovery. Standard eDiscovery (search and export) is in E3. Premium eDiscovery (legal holds, advanced filtering, review sets) requires E5. Relevant for organizations with legal obligations or GDPR deletion requests.
Sensitivity Labels. Manual labeling (user chooses "Confidential" themselves) is in Business Premium and E3. Automatic labeling (system scans and classifies) requires E5. The difference matters: manual labeling depends on users remembering to do it.
AI and Copilot
Microsoft 365 Copilot. Only included in E7 ($99). For the other plans (Business Basic, Standard and Premium, E3, E5, F1 and F3) it can be purchased as an add-on at $30/user/mo, or $21 as Copilot Business on a Business plan with up to 300 users. On Basic and the F plans it only works in the web versions of Office.
Copilot Chat. Free web-based AI chat in all Microsoft 365 licenses including F1 and F3, with enterprise data protection. Answers questions based on web data but has no access to your company data. It is not the same product as Microsoft 365 Copilot.
Security Copilot. AI-assisted security analysis. Included with Microsoft 365 E5 and E7 at 400 SCUs a month per 1,000 paid licenses, up to 10,000 SCUs, at no extra cost. It scales below 1,000 licenses too, so 400 users get 160 SCUs. Without E5 or E7 the capacity must be bought separately.
Agent 365. AI agent platform. $15/user/mo as add-on or included in E7. Not available in E3 or E5 without add-on.
Productivity and device management
Desktop Office apps (Word, Excel, Outlook). Not in Business Basic ($7) or F1/F3. Requires minimum Business Standard ($14). This is the most common reason for choosing Standard over Basic.
Intune (MDM/MAM). Included in Business Premium ($22), E3 ($39), E5, E7 and the frontline plans F1 ($3) and F3 ($10), both of which include Intune Plan 1. Not in Business Basic or Business Standard. On July 1, 2026 E3 got Remote Help, Advanced Analytics and Intune Plan 2. E5 got those plus Endpoint Privilege Management, Cloud PKI and Enterprise App Management, that is the whole Intune Suite. On E3 the last three are still an add-on at ~$10/user/mo.
Teams Phone. Cloud PBX directly in Teams. Only in Office 365 E5 ($41), M365 E5 ($60) and E7 ($99). Not in E3, not even as an included feature. Important: the Teams Phone license only includes the PBX functionality itself. Actual PSTN calls require either a Calling Plan ($12-24/mo), Operator Connect or Direct Routing to an SBC.
Power BI Pro. Included in E5 and E7. All other plans only have free Power BI access with limited functionality. Power BI Pro can also be purchased as a separate add-on at $14/user/mo.
The full picture
This article covers 12 of the most searched features. But Microsoft 365 has over 60 features spread across the 10 plans, and new ones are added regularly.
Use Feature Lookup to search all features instantly. Each result shows which plans include it, the cheapest plan and whether the feature is basic or enhanced.
If you already know which plan you're considering, you can also compare two plans side-by-side or use the optimizer to get a personalized recommendation.
Sources: Office 365 plan options (Microsoft Learn) and Microsoft 365 tenant-level services licensing guidance (Microsoft Learn) and Microsoft 365 packaging and pricing updates 2026 (Microsoft).
Search all 60+ features
Use Feature Lookup to find any feature with plan and price.
Open Feature LookupFrequently asked questions
Which Microsoft 365 plan includes Intune?+
Intune is included in Business Premium ($22/mo), Microsoft 365 E3 ($39), E5 ($60), E7 ($99), and in the frontline plans F1 ($3) and F3 ($10). Not in Business Basic or Business Standard. For office staff, Business Premium is the cheapest route if you have under 300 users.
Which plans include Teams Phone?+
Teams Phone System (cloud PBX) is included in Office 365 E5 ($41/mo), Microsoft 365 E5 ($60), and E7 ($99). For all other plans it can be purchased as an add-on at $10/user/mo. Note: PSTN calls require a separate Calling Plan ($12-24/mo) or Direct Routing.
What's the cheapest plan with Conditional Access?+
Conditional Access requires Entra ID P1. On price alone the frontline plan F1 ($3/mo) is the cheapest with P1, but it may only be assigned to frontline workers. For ordinary office staff, Business Premium ($22/mo) is the cheapest. Basic and Standard only have Security Defaults (all-or-nothing MFA), not granular Conditional Access.