Microsoft 365 Enterprise - Shawn Harry · Governance Microsoft Identity Manager 3rd Party MFA...
Transcript of Microsoft 365 Enterprise - Shawn Harry · Governance Microsoft Identity Manager 3rd Party MFA...
Microsoft 365 Enterprise BenefitsMicrosoft 365 Enterprise Benefits
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5Microsoft 365 E5
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
Win
do
ws
10
E3
Win
do
ws
10
E3
Off
ice 3
65
E3
Off
ice 3
65
E3
Microsoft 365 E3Microsoft 365 E3
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Azure
ATP
Azure
ATP
Next Gen
Protection
Next Gen
Protection
Phone
System
Phone
System
Audio
Conferencing
Audio
Conferencing
Power BI ProPower BI Pro
Office 365
ProPlus
Office 365
ProPlus
PlannerPlannerMeeting
Broadcast
Meeting
Broadcast
Insights by
MyAnalytics
Insights by
MyAnalytics
Office
Online &
Mobile
Office
Online &
Mobile
Yammer
Enterprise
Yammer
Enterprise
Microsoft
Teams
Microsoft
Teams
Stream for
Office 365
Stream for
Office 365
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
SwaySway
Microsoft
Forms
Microsoft
FormsDelveDelve
Power
Automate for
Office 365
Power
Automate for
Office 365
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Off
ice 3
65
E5
Off
ice 3
65
E5
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
Win
do
ws
10
E5
Win
do
ws
10
E5
Microsoft 365 E3Microsoft 365 E3
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Azure AD Premium Plan 2Azure AD Premium Plan 2
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
Azure AD Premium Plan 1Azure AD Premium Plan 1
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
One traditional Office Professional Plus device install for
each existing Software Assurance (SA) user, and new users
up to the number of existing from SA users.
Office Device
Licenses
Office Device
Licenses
Install SharePoint, Exchange, and Skype for Business Server,
on dedicated hardware (not multi-tenant), for use by
Microsoft 365 E3 and E5 licensed users.
Productivity
Server
Licenses
Productivity
Server
Licenses
Exchange
Online
Protection
Exchange
Online
Protection
eDiscoveryeDiscovery Kaizala ProKaizala Pro
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Attack
Surface
Reduction
Attack
Surface
Reduction
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
MyAnalytics
(Full)
MyAnalytics
(Full)
Entitlement
Management
Entitlement
Management
Supervision
Policies
Supervision
Policies
Ad
dit
ion
al
Lic
en
sin
g
Power AppsPower AppsProject
Online
Project
Online
Visio
Online
Visio
Online
Workplace
Analytics
Workplace
Analytics
Additional
Storage
Additional
Storage
Ad
dit
ion
al
Lic
en
sin
g
Microsoft
Managed
Desktop
Microsoft
Managed
Desktop
Calling
Plans
Calling
PlansMulti-GeoMulti-Geo
Power
Automate
Power
Automate
FastTrack helps customers deploy Microsoft 365.
Customers with 150+ eligible licenses can use FastTrack at
no additional cost for the life of their subscription.
FastTrackFastTrack
Insider Risk
Management
(preview)
Insider Risk
Management
(preview)
Microsoft 365 EnterpriseMicrosoft 365 EnterpriseFebruary 2020
@AaronDinnage@AaronDinnage
Azure
Information
Protection -
Office 365
Azure
Information
Protection -
Office 365
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Exchange
Online
Plan 2
Exchange
Online
Plan 2
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Microsoft
Identity
Manager
Microsoft
Identity
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Audit
Logging &
Alerting
Audit
Logging &
Alerting
Automated
Investigation
& Response
Automated
Investigation
& Response
Records
Management
Records
Management
Microsoft
Forms Pro
Microsoft
Forms Pro
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Microsoft 365 Enterprise Common FeaturesMicrosoft 365 Enterprise Common Features
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5Microsoft 365 E5
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
Win
do
ws
10
E3
Win
do
ws
10
E3
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Azure
ATP
Azure
ATP
Office 365
ProPlus
Office 365
ProPlus
PlannerPlannerMeeting
Broadcast
Meeting
Broadcast
Insights by
MyAnalytics
Insights by
MyAnalytics
Yammer
Enterprise
Yammer
Enterprise
Microsoft
Teams
Microsoft
Teams
Stream for
Office 365
Stream for
Office 365
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
SwaySway
Microsoft
Forms
Microsoft
FormsDelveDelve
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Off
ice 3
65
E5
Off
ice 3
65
E5
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
Win
do
ws
10
E5
Win
do
ws
10
E5
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 EnterpriseMicrosoft 365 EnterpriseFebruary 2020
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
@AaronDinnage@AaronDinnage
Exchange
Online
Protection
Exchange
Online
Protection
eDiscoveryeDiscovery Kaizala ProKaizala Pro
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Off
ice 3
65
E3
Off
ice 3
65
E3
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 ComplianceMicrosoft 365 E3Microsoft 365 E3
Azure AD Premium Plan 1Azure AD Premium Plan 1Azure AD Premium Plan 2
(includes Plan 1 features)
Azure AD Premium Plan 2
(includes Plan 1 features)
Ad
d-o
ns
Power AppsPower AppsProject
Online
Project
OnlineVisio OnlineVisio Online
Workplace
Analytics
Workplace
Analytics
Additional
Storage
Additional
Storage
Ad
d-o
ns
Microsoft
Managed
Desktop
Microsoft
Managed
Desktop
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
Next Gen
Protection
Next Gen
Protection
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Attack
Surface
Reduction
Attack
Surface
Reduction
Calling PlansCalling PlansMulti-GeoMulti-Geo
Entitlement
Management
Entitlement
Management
Power
Automate for
Office 365
Power
Automate for
Office 365
Power
Automate
Power
Automate
Phone
System
Phone
System
Audio
Conferencing
Audio
Conferencing
Power BI ProPower BI Pro
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
MyAnalytics
(Full)
MyAnalytics
(Full)
Supervision
Policies
Supervision
Policies
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
One traditional Office Professional Plus device install for
each existing Software Assurance (SA) user, and new users
up to the number of existing from SA users.
Office Device
Licenses
Office Device
Licenses
Install SharePoint, Exchange, and Skype for Business Server,
on dedicated hardware (not multi-tenant), for use by
Microsoft 365 E3 and E5 licensed users.
Productivity
Server
Licenses
Productivity
Server
Licenses
FastTrack helps customers deploy Microsoft 365.
Customers with 150+ eligible licenses can use FastTrack at
no additional cost for the life of their subscription.
FastTrackFastTrack
Exchange
Online
Plan 2
Exchange
Online
Plan 2
Office
Online &
Mobile
Office
Online &
Mobile
Azure
Information
Protection -
Office 365
Azure
Information
Protection -
Office 365
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Microsoft
Identity
Manager
Microsoft
Identity
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Audit
Logging &
Alerting
Audit
Logging &
Alerting
Automated
Investigation
& Response
Automated
Investigation
& Response
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Insider Risk
Management
(preview)
Insider Risk
Management
(preview)
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Microsoft
Forms Pro
Microsoft
Forms Pro
Records
Management
Records
Management
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5Microsoft 365 E5
En
terp
rise
Mo
bil
ity +
Secu
rity
(EM
S)
En
terp
rise
Mo
bil
ity +
Secu
rity
(EM
S)
Win
do
ws
10
Win
do
ws
10
Off
ice 3
65
Off
ice 3
65
Microsoft 365 E3Microsoft 365 E3
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Azure
ATP
Azure
ATP
Next Gen
Protection
Next Gen
Protection
Office 365
ProPlus
Office 365
ProPlus
Meeting
Broadcast
Meeting
Broadcast
Stream for
Office 365
Stream for
Office 365
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
Microsoft
Forms
(Publish)
Microsoft
Forms
(Publish)
DelveDelve
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Audit
Logging
Audit
Logging
Off
ice 3
65
Off
ice 3
65
En
terp
rise
Mo
bil
ity +
Secu
rity
(EM
S)
En
terp
rise
Mo
bil
ity +
Secu
rity
(EM
S)
Win
do
ws
10
Win
do
ws
10
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 Enterprise (F1-E3-E5)Microsoft 365 Enterprise (F1-E3-E5)February 2020
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Azure AD Premium Plan 2Azure AD Premium Plan 2
@AaronDinnage@AaronDinnage
eDiscoveryeDiscovery
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Attack
Surface
Reduction
Attack
Surface
Reduction
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
Microsoft 365 F1Microsoft 365 F1
Microsoft 365 F1Microsoft 365 F1
Microsoft 365 F1 users are entitled to local installs of Windows 10 E3 with Azure Active Directory activation.
Microsoft 365 F1 does not include:• KMS activation• Re-imaging rights• Downgrade rights• Long Term Servicing Channel (LTSC) rights• Microsoft Desktop Optimization Pack (MDOP)
• Virtualization rights other than WVD
Microsoft 365 F1 includes the features of EMS E3 but not Enterprise CAL equivalent rights.
Office
Mobile
Office
Mobile
Yammer
Enterprise
Yammer
EnterpriseSwaySway
Exchange
Online
Protection
Exchange
Online
Protection
Office
Online
Office
Online
Kaizala ProKaizala Pro
Microsoft
Teams
Microsoft
Teams
Exchange
Online Kiosk
(2 GB)
Exchange
Online Kiosk
(2 GB)
SharePoint
Online Kiosk
SharePoint
Online Kiosk
Skype for
Business
Plan 1
(retiring)
Skype for
Business
Plan 1
(retiring)
OneDrive for
Business
F1 (2 GB)
OneDrive for
Business
F1 (2 GB)
Stream
(Consume)
Stream
(Consume)
Power Apps
(Consume)
Power Apps
(Consume)
Microsoft
Forms
(Consume)
Microsoft
Forms
(Consume)
Power
Automate
(Consume)
Power
Automate
(Consume)
Office 365 F1 limitations:• No Outlook access, no voicemail.• Users cannot be administrators.• Users don’t add SharePoint storage.• No OneDrive for Business sync.• Cannot create Teams meetings.• No Skype desktop or app sharing.• Cannot schedule Skype meetings.• No access to productivity servers.
Calling Plans are an add-on to Phone System (part of Office
365 E5) which provide users with fully-featured public
telephone numbers directly from Office 365.
Microsoft 365 plans include Power Apps for Office 365.
Additional Power Apps licensing and can provide model-
driven apps and Common Data Service integration.
Use Workplace Analytics to identify collaboration patterns
that impact productivity, workforce effectiveness, and
employee engagement.
Top-ups to the included storage in Office 365 can be
purchased at cost-effective rates.
A complete cloud-based project and portfolio management
solution, and provides a way to move MS Project software
licensing to a user subscription.
Allows users to work with Visio diagrams directly in the
browser, and provides a way to move Visio software
licensing to a user subscription.
One traditional Office Professional Plus device install for
existing Software Assurance (SA) users, and new users up
to the number of existing from SA users.
Microsoft 365 Enterprise BenefitsMicrosoft 365 Enterprise Benefits
Office Device
Licenses
Office Device
Licenses
Additional Licensing
Microsoft 365 plans include Power Automate for Office 365.
Additional Power Automate licensing can provide more runs
per month, Common Data Service integration, and connectivity
to LOB services.
Power AppsPower Apps
Project
Online
Project
Online
Visio OnlineVisio Online
Workplace
Analytics
Workplace
Analytics
Additional
Storage
Additional
Storage
Microsoft Managed Desktop (MMD) is an add-on to
Microsoft 365 E5 Security that delivers a modern managed
desktop directly from, and supported by Microsoft.
Microsoft
Managed
Desktop
Microsoft
Managed
Desktop
Install SharePoint, Exchange, and Skype for Business Server, on
dedicated hardware (not multi-tenant), for use by Microsoft
365 E3 and E5 licensed users.
Productivity
Server
Licenses
Productivity
Server
Licenses
Additional Licensing
Microsoft 365 Enterprise BenefitsMicrosoft 365 Enterprise Benefits
Calling PlansCalling Plans
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
Azure AD Premium Plan 1Azure AD Premium Plan 1
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Multi-Geo allows you spread your Office 365 deployment
around the globe, placing workloads closer to your users,
within a single logical tenancy.
Multi-GeoMulti-Geo
PlannerPlanner
Insights by
MyAnalytics
Insights by
MyAnalytics
Entitlement
Management
Entitlement
Management
Power
Automate for
Office 365
Power
Automate for
Office 365
Power
Automate
Power
Automate
Phone
System
Phone
System
Audio
Conferencing
Audio
Conferencing
Power BI ProPower BI Pro
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
MyAnalytics
(Full)
MyAnalytics
(Full)
Supervision
Policies
Supervision
Policies
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
FastTrack helps customers deploy Microsoft 365. Customers
with 150+ eligible licenses can use FastTrack at no additional
cost for the life of their subscription.
FastTrackFastTrack
Exchange
Online
Plan 2
Exchange
Online
Plan 2
Azure
Information
Protection -
Office 365
Azure
Information
Protection -
Office 365
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Microsoft
Identity
Manager
Microsoft
Identity
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Alert PoliciesAlert Policies
Automated
Investigation
& Response
Automated
Investigation
& Response
Insider Risk
Management
(preview)
Insider Risk
Management
(preview)
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Microsoft Forms Pro builds on Microsoft Forms by adding new
capabilities for capturing different and more complex data,
and analyzing that data with Power BI.
Microsoft
Forms Pro
Microsoft
Forms Pro
Records
Management
Records
Management
Calling Plans are an add-on to Phone System (part of Office
365 E5) which provide users with fully-featured public
telephone numbers directly from Office 365.
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E5
Mic
roso
ft 3
65
E5
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Mic
roso
ft 3
65
E5
Microsoft 365 plans include Power Apps for Office 365.
Additional Power Apps licensing and can provide model-
driven apps and Common Data Service integration.
Use Workplace Analytics to identify collaboration patterns
that impact productivity, workforce effectiveness, and
employee engagement.
Top-ups to the included storage in Office 365 can be
purchased at cost-effective rates.
A complete cloud-based project and portfolio management
solution, and provides a way to move MS Project software
licensing to a user subscription.
Allows users to work with Visio diagrams directly in the
browser, and provides a way to move Visio software
licensing to a user subscription.
Office 365 E3Office 365 E3
Office 365 E5Office 365 E5
Windows 10 E3Windows 10 E3
Windows 10 E5Windows 10 E5
Enterprise Mobility + Security E3
(EMS E3)
Enterprise Mobility + Security E3
(EMS E3)
Enterprise Mobility + Security E5
(EMS E5)
Enterprise Mobility + Security E5
(EMS E5)
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
ATP
Azure
ATP
Phone
System
Phone
System
Audio
Conferencing
Audio
ConferencingPower BI ProPower BI Pro
Microsoft 365 EnterpriseMicrosoft 365 EnterpriseFebruary 2020
@AaronDinnage@AaronDinnage
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
Azure AD Premium Plan 1Azure AD Premium Plan 1
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
Next Gen
Protection
Next Gen
Protection
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Attack
Surface
Reduction
Attack
Surface
Reduction
Office 365
ProPlus
Office 365
ProPlus
PlannerPlannerMeeting
Broadcast
Meeting
Broadcast
Yammer
Enterprise
Yammer
Enterprise
Microsoft
Teams
Microsoft
Teams
Stream for
Office 365
Stream for
Office 365
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
SwaySway
Microsoft
Forms
Microsoft
FormsDelveDelve
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Exchange
Online
Protection
Exchange
Online
Protection
eDiscoveryeDiscovery
Kaizala ProKaizala Pro
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Azure AD Premium Plan 2
(includes Plan 1 features)
Azure AD Premium Plan 2
(includes Plan 1 features)
Additional Licensing
Microsoft 365 plans include Power Automate for Office 365.
Additional Power Automate licensing can provide more runs
per month, Common Data Service integration, and connectivity
to LOB services.
Power AppsPower Apps
Project
Online
Project
Online
Visio OnlineVisio Online
Workplace
Analytics
Workplace
Analytics
Additional
Storage
Additional
Storage
Microsoft Managed Desktop (MMD) is an add-on to
Microsoft 365 E5 Security that delivers a modern managed
desktop directly from, and supported by Microsoft.
Microsoft
Managed
Desktop
Microsoft
Managed
Desktop
Additional Licensing
Calling PlansCalling Plans
Multi-Geo allows you spread your Office 365 deployment
around the globe, placing workloads closer to your users,
within a single logical tenancy.
Multi-GeoMulti-Geo
Insights by
MyAnalytics
Insights by
MyAnalytics
MyAnalytics
(Full)
MyAnalytics
(Full)
Entitlement
Management
Entitlement
Management
Power
Automate for
Office 365
Power
Automate for
Office 365
Power
Automate
Power
Automate
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
Supervision
Policies
Supervision
Policies
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
One traditional Office Professional Plus device install for
existing Software Assurance (SA) users, and new users up
to the number of existing from SA users.
Microsoft 365 Enterprise BenefitsMicrosoft 365 Enterprise Benefits
Office Device
Licenses
Office Device
Licenses
Install SharePoint, Exchange, and Skype for Business Server, on
dedicated hardware (not multi-tenant), for use by Microsoft
365 E3 and E5 licensed users.
Productivity
Server
Licenses
Productivity
Server
Licenses
Microsoft 365 Enterprise BenefitsMicrosoft 365 Enterprise Benefits
FastTrack helps customers deploy Microsoft 365. Customers
with 150+ eligible licenses can use FastTrack at no additional
cost for the life of their subscription.
FastTrackFastTrack
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Office
Online &
Mobile
Office
Online &
Mobile
Azure
Information
Protection -
Office 365
Azure
Information
Protection -
Office 365
Exchange
Online
Plan 2
Exchange
Online
Plan 2
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Microsoft
Identity
Manager
Microsoft
Identity
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Audit
Logging &
Alerting
Audit
Logging &
Alerting
Automated
Investigation
& Response
Automated
Investigation
& Response
Insider Risk
Management
(preview)
Insider Risk
Management
(preview)
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Microsoft Forms Pro builds on Microsoft Forms by adding new
capabilities for capturing different and more complex data,
and analyzing that data with Power BI.
Microsoft
Forms Pro
Microsoft
Forms Pro
Records
Management
Records
Management
Mic
roso
ft 3
65
F1
Mic
roso
ft 3
65
F1
Mic
roso
ft 3
65
F1
Mic
roso
ft 3
65
F1
Office 365 F1Office 365 F1 Windows 10 E3 for Microsoft 365 F1Windows 10 E3 for Microsoft 365 F1Enterprise Mobility + Security for Microsoft 365 F1
(EMS E3 for Microsoft 365 F1)
Enterprise Mobility + Security for Microsoft 365 F1
(EMS E3 for Microsoft 365 F1)
Office 365 F1Office 365 F1 Windows 10 E3 for Microsoft 365 F1Windows 10 E3 for Microsoft 365 F1Enterprise Mobility + Security for Microsoft 365 F1
(EMS E3 for Microsoft 365 F1)
Enterprise Mobility + Security for Microsoft 365 F1
(EMS E3 for Microsoft 365 F1)
Office
Mobile
Office
Mobile
Yammer
Enterprise
Yammer
EnterpriseSwaySway
Exchange
Online
Protection
Exchange
Online
Protection
Office
Online
Office
Online
Kaizala ProKaizala Pro
Microsoft
Teams
Microsoft
Teams
Exchange
Online Kiosk
(2 GB)
Exchange
Online Kiosk
(2 GB)
SharePoint
Online Kiosk
SharePoint
Online Kiosk
OneDrive for
Business
F1 (2 GB)
OneDrive for
Business
F1 (2 GB)
Stream
(Consume)
Stream
(Consume)
Power Apps
(Consume)
Power Apps
(Consume)
Microsoft
Forms
(Consume)
Microsoft
Forms
(Consume)
Office 365 F1 limitations:• No Outlook access, no voicemail.• Users cannot be administrators.• Users don’t add to storage.• No OneDrive for Business sync.• Cannot create Teams meetings.• No Skype desktop/app sharing.• Cannot schedule meetings.• No access to productivity
servers.
Microsoft 365 F1 includes the features of EMS E3 but not Enterprise CAL equivalent rights.
Microsoft 365 F1 users are entitled to local installs of Windows 10 E3 with Azure Active Directory activation.
Microsoft 365 F1 does not include:• KMS activation• Re-imaging rights• Downgrade rights• Long Term Servicing Channel
(LTSC) rights• Microsoft Desktop Optimization
Pack (MDOP)• Virtualization rights other than
WVD
PlannerPlanner
Power
Automate
(Consume)
Power
Automate
(Consume)
Skype for
Business
Plan 1
(retiring)
Skype for
Business
Plan 1
(retiring)
Alert PoliciesAlert Policies
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E3
Mic
roso
ft 3
65
E3
Office 365 E3Office 365 E3 Windows 10 E3Windows 10 E3Enterprise Mobility + Security E3
(EMS E3)
Enterprise Mobility + Security E3
(EMS E3)
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Microsoft
Identity
Manager
Microsoft
Identity
Manager
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
Azure AD Premium Plan 1Azure AD Premium Plan 1
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Office 365
ProPlus
Office 365
ProPlus
PlannerPlannerMeeting
Broadcast
Meeting
Broadcast
Office
Mobile
Office
Mobile
Yammer
Enterprise
Yammer
Enterprise
Microsoft
Teams
Microsoft
Teams
Stream for
Office 365
Stream for
Office 365
Exchange
Online
Plan 2
Exchange
Online
Plan 2
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
SwaySway
Microsoft
Forms
Microsoft
FormsDelveDelve
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Exchange
Online
Protection
Exchange
Online
Protection
Office
Online
Office
Online
eDiscoveryeDiscovery
Kaizala ProKaizala Pro
Office 365 E3Office 365 E3 Windows 10 E3Windows 10 E3Enterprise Mobility + Security E3
(EMS E3)
Enterprise Mobility + Security E3
(EMS E3)
Insights by
MyAnalytics
Insights by
MyAnalytics
Power
Automate for
Office 365
Power
Automate for
Office 365
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Audit
Logging &
Alerting
Audit
Logging &
Alerting
Office 365 E5Office 365 E5 Windows 10 E5Windows 10 E5Enterprise Mobility + Security E5
(EMS E5)
Enterprise Mobility + Security E5
(EMS E5)
Office 365 E5Office 365 E5 Windows 10 E5Windows 10 E5Enterprise Mobility + Security E5
(EMS E5)
Enterprise Mobility + Security E5
(EMS E5)
Mic
roso
ft 3
65
E5
Mic
roso
ft 3
65
E5
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Secu
rity
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Co
mp
lian
ce
Mic
roso
ft 3
65
E5
Mic
roso
ft 3
65
E5
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
ATP
Azure
ATP
Phone
System
Phone
System
Audio
Conferencing
Audio
ConferencingPower BI ProPower BI Pro
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
Next Gen
Protection
Next Gen
Protection
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Attack
Surface
Reduction
Attack
Surface
Reduction
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Azure AD Premium Plan 2
(includes Plan 1 features)
Azure AD Premium Plan 2
(includes Plan 1 features)
MyAnalytics
(Full)
MyAnalytics
(Full)
Entitlement
Management
Entitlement
Management
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
Supervision
Policies
Supervision
Policies
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Automated
Investigation
& Response
Automated
Investigation
& Response
Insider Risk
Management
(preview)
Insider Risk
Management
(preview)
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Records
Management
Records
Management
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
Win
do
ws
10
E3
Win
do
ws
10
E3
Off
ice 3
65
E3
Off
ice 3
65
E3
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Office 365
ProPlus
Office 365
ProPlus
PlannerPlannerMeeting
Broadcast
Meeting
Broadcast
Office
Mobile
Office
Mobile
Yammer
Enterprise
Yammer
Enterprise
Microsoft
Teams
Microsoft
Teams
Stream for
Office 365
Stream for
Office 365
Exchange
Online
Plan 2
Exchange
Online
Plan 2
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
SwaySway
Microsoft
Forms
Microsoft
FormsDelveDelve
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Off
ice 3
65
E5
Off
ice 3
65
E5
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
Win
do
ws
10
E5
Win
do
ws
10
E5
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
Azure AD Premium Plan 1Azure AD Premium Plan 1
Exchange
Online
Protection
Exchange
Online
Protection
Office
Online
Office
Online
eDiscoveryeDiscovery Kaizala ProKaizala Pro
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Insights by
MyAnalytics
Insights by
MyAnalytics
Power
Automate for
Office 365
Power
Automate for
Office 365
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
Microsoft
Identity
Manager
Microsoft
Identity
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Audit
Logging &
Alerting
Audit
Logging &
Alerting
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Azure
ATP
Azure
ATP
Next Gen
Protection
Next Gen
Protection
Phone
System
Phone
System
Audio
Conferencing
Audio
Conferencing
Power BI ProPower BI Pro
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Azure AD Premium Plan 2Azure AD Premium Plan 2
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Attack
Surface
Reduction
Attack
Surface
Reduction
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
MyAnalytics
(Full)
MyAnalytics
(Full)
Entitlement
Management
Entitlement
Management
Supervision
Policies
Supervision
Policies
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Automated
Investigation
& Response
Automated
Investigation
& Response
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Records
Management
Records
Management
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
En
terp
rise
Mo
bil
ity +
Secu
rity
E3
(EM
S E
3)
Win
do
ws
10
E3
Win
do
ws
10
E3
Off
ice 3
65
E3
Off
ice 3
65
E3
Advanced
Threat
Analytics
Advanced
Threat
Analytics
Intune MDM
& MAM
Intune MDM
& MAM
Azure
Information
Protection
Plan 1
Azure
Information
Protection
Plan 1
Windows
Server CAL
Rights
Windows
Server CAL
Rights
System
Center
Endpoint
Protection
System
Center
Endpoint
Protection
Microsoft
Cloud App
Security
Microsoft
Cloud App
Security
Azure
Information
Protection
Plan 2
Azure
Information
Protection
Plan 2
Azure
ATP
Azure
ATP
Next Gen
Protection
Next Gen
Protection
Office 365
ProPlus
Office 365
ProPlus
PlannerPlannerMeeting
Broadcast
Meeting
Broadcast
Office
Mobile
Office
Mobile
Yammer
Enterprise
Yammer
Enterprise
Microsoft
Teams
Microsoft
Teams
Stream for
Office 365
Stream for
Office 365
Exchange
Online
Plan 2
Exchange
Online
Plan 2
SharePoint
Online
Plan 2
SharePoint
Online
Plan 2
OneDrive for
Business
Plan 2
OneDrive for
Business
Plan 2
Power Apps
for
Office 365
Power Apps
for
Office 365
SwaySway
Microsoft
Forms
Microsoft
FormsDelveDelve
Data Loss
Prevention
Data Loss
Prevention
Retention
Policy
Retention
Policy
Off
ice 3
65
E5
Off
ice 3
65
E5
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
En
terp
rise
Mo
bil
ity +
Secu
rity
E5
(EM
S E
5)
Win
do
ws
10
E5
Win
do
ws
10
E5
Advanced
Security
Reports &
Alerts
Advanced
Security
Reports &
Alerts
Single-Sign-
On to other
SaaS
Single-Sign-
On to other
SaaS
App Proxy,
including
PingAccess
App Proxy,
including
PingAccess
Multi-Factor
Auth (MFA)
Multi-Factor
Auth (MFA)
Azure AD
Connect
Health
Azure AD
Connect
Health
Cloud App
Discovery
Cloud App
Discovery
Shared
Account
Password
Roll-Over
Shared
Account
Password
Roll-Over
Self-Service
Password
Reset in AD
Self-Service
Password
Reset in AD
Self-Service
Group
Management
Self-Service
Group
Management
Conditional
Access
Conditional
Access
Azure AD Premium Plan 1Azure AD Premium Plan 1
Exchange
Online
Protection
Exchange
Online
Protection
Office
Online
Office
Online
eDiscoveryeDiscovery Kaizala ProKaizala Pro
Azure AD
B2B
5 guests per user
Azure AD
B2B
5 guests per user
Enterprise
State
Roaming
Enterprise
State
Roaming
Terms of UseTerms of Use
Group-Based
Access
Management
Group-Based
Access
Management
Microsoft
Threat
Experts
Microsoft
Threat
Experts
Endpoint
Detection &
Response
Endpoint
Detection &
Response
Automated
Investigation
& Response
Automated
Investigation
& Response
Threat
Analytics
Threat
Analytics
Advanced
Hunting
Advanced
Hunting
Microsoft Defender ATPMicrosoft Defender ATP
Attack
Surface
Reduction
Attack
Surface
Reduction
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5 ComplianceMicrosoft 365 E5 ComplianceMicrosoft 365 E5 SecurityMicrosoft 365 E5 Security
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 E3Microsoft 365 E3
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security Microsoft 365 E5 ComplianceMicrosoft 365 E5 Compliance
Microsoft 365 E5Microsoft 365 E5
Microsoft 365 E5 SecurityMicrosoft 365 E5 Security
Insights by
MyAnalytics
Insights by
MyAnalytics
Azure
Identity
Protection
Azure
Identity
Protection
Privileged
Identity
Management
Privileged
Identity
Management
Access
Reviews
Access
Reviews
Risk-Based
Conditional
Access
Risk-Based
Conditional
Access
Azure AD Premium Plan 2Azure AD Premium Plan 2
Entitlement
Management
Entitlement
Management
Power
Automate for
Office 365
Power
Automate for
Office 365
Active
Directory
RMS
Active
Directory
RMS
Azure
RMS
Azure
RMS
Skype for
Business
Plan 2
(retiring)
Skype for
Business
Plan 2
(retiring)
Threat &
Vulnerability
Management
Threat &
Vulnerability
Management
Microsoft
Endpoint
Config
Manager
Microsoft
Endpoint
Config
Manager
Microsoft
Identity
Manager
Microsoft
Identity
Manager
3rd
Party
MFA
Integration
3rd
Party
MFA
Integration
App-VApp-V
Cortana
Management
Cortana
Management
Voice, Pen,
Touch, Ink,
and Gesture
Voice, Pen,
Touch, Ink,
and Gesture
MDM &
MAM
MDM &
MAM
Microsoft
Store for
Business
Microsoft
Store for
Business
AppLockerAppLocker
Windows
Virtual
Desktop
Windows
Virtual
Desktop
Conditional
Access
Conditional
Access
Windows
Hello
Management
Windows
Hello
Management
Windows
Information
Protection
Windows
Information
Protection
Direct AccessDirect AccessDevice GuardDevice Guard
Windows
Analytics
Windows
Analytics
Windows
Update for
Business
Windows
Update for
Business
Windows
to Go
Windows
to Go
Windows
Defender
Antivirus
Windows
Defender
Antivirus
BranchCacheBranchCache
MDOPMDOP
Credential
Guard
Credential
Guard
User
Experience
Virtualisation
User
Experience
Virtualisation
Application
Guard
Application
Guard
Azure AD
& Domain
Join
Azure AD
& Domain
Join
BitLocker &
BitLocker to
Go
BitLocker &
BitLocker to
Go
Long Term
Servicing
Channel
Long Term
Servicing
Channel
Audit
Logging &
Alerting
Audit
Logging &
Alerting
Phone
System
Phone
System
Audio
Conferencing
Audio
Conferencing
Power BI ProPower BI Pro
Customer
Lockbox
Customer
Lockbox
Customer
Key
Customer
Key
Advanced
eDiscovery
Advanced
eDiscovery
Privileged
Access
Management
Privileged
Access
Management
Office 365 Advanced ComplianceOffice 365 Advanced Compliance
Data Loss
Prevention
for Teams
Data Loss
Prevention
for Teams
Advanced
Message
Encryption
Advanced
Message
Encryption
Information
Barriers
Information
Barriers
Office 365
ATP Plan 1
Office 365
ATP Plan 1
Office 365 ATP Plan 2Office 365 ATP Plan 2
Threat
Trackers
Threat
Trackers
Attack
Simulator
Attack
Simulator
MyAnalytics
(Full)
MyAnalytics
(Full)
Supervision
Policies
Supervision
Policies
Office 365
Cloud App
Security
Office 365
Cloud App
Security
Threat
Explorer
Threat
Explorer
Advanced
Data
Governance
Advanced
Data
Governance
Automated
Investigation
& Response
Automated
Investigation
& Response
1 Year
Audit Log
Retention
1 Year
Audit Log
Retention
Records
Management
Records
Management