If you run technology for an organization with 250 to 5,000 employees, your Microsoft 365 bill is one of the largest recurring line items you own, and it is almost certainly not optimized. Most mid-market and enterprise environments carry a mix of license tiers that accumulated through hiring, acquisitions, and renewals that nobody fully audited. The result is predictable: some users sit on an expensive Office 365 E3 license they barely touch, while others lack the security coverage that compliance obligations actually require. An E3 seat that nobody uses is pure waste, and it is more common than most leaders expect.
This guide breaks down what each Microsoft 365 plan costs in 2026, what each tier includes, and how to decide which license belongs on which user. It is written for the people who answer for both the budget and the risk: the CIO, the CISO, the CTO, and the heads of technology who sign off on renewals.
One thing to settle before we go further: Microsoft raised prices on most commercial plans effective July 1, 2026, as confirmed in Microsoft’s Partner Center announcements. If your renewal falls after that date, the numbers below are what you will pay, and the case for an audit before you renew is stronger than it has been in years.
Why Microsoft 365 Licensing Decisions Are Harder Than the Price Tag
The headline price of an Office 365 E3 license, or any tier, tells you very little about what an organization actually spends. Microsoft structures its plans so that the gap between tiers is measured in security and compliance capability, not in productivity apps. That is where the real money sits, and where the real risk sits too.
For regulated industries, this is not an abstract concern. The HIPAA Security Rule is technology-neutral and risk-based, but the controls that auditors expect to see, including Insider Risk Management, Communication Compliance, advanced audit, and eDiscovery, map directly to capabilities that live in higher Microsoft 365 tiers. A healthcare system running on the wrong tier is not just overspending or underspending. It may be missing capabilities that its own risk analysis points to as necessary. An education institution managing student and staff data has a parallel problem. The license decision and the compliance posture are the same decision.
The July 2026 increase sharpens all of this. Office 365 E3 rose 13 percent, the steepest jump in the lineup. Microsoft 365 E3 rose 8.3 percent. E5 rose 5.3 percent. Business Premium and Office 365 E1 held flat. When prices move unevenly across tiers, the math that justified your current license mix last year may no longer hold.
Microsoft 365 Plan Overview: What Each License Tier Includes
Microsoft sells licenses in three families. Business plans are capped at 300 users per tenant and are built for smaller organizations, a limit Microsoft documents explicitly. Enterprise plans, the E-series, have no user cap and carry the security and compliance depth that larger and regulated organizations need. Apps plans cover the Office applications alone with no broader services. For organizations in the 250 to 5,000 employee range, the decision almost always comes down to the Enterprise tiers, where E3 is the anchor, and at the lower end, Business Premium.
Here is what each of the plans most relevant to your environment includes, with 2026 pricing.
Office 365 E1: Web-Only Access at $10 Per User Per Month
The Office 365 E1 license gives users the web and mobile versions of the Office apps, Exchange email, Teams, and SharePoint, with no desktop installation of Word, Excel, or Outlook. Its price held at $10 per user per month through the July 2026 changes.
E1 is the tier most often assigned by mistake. It gets handed out as a default to new hires, and it lingers on accounts that should have been moved up or down years ago. If you have a meaningful number of Office 365 E1 license seats, that is the first place an audit pays for itself. True frontline workers belong on an F-series plan that costs less. Anyone who needs desktop Office belongs on E3.
Office 365 E3 License: The Enterprise Workhorse at $26 Per User Per Month
The Office 365 E3 license is the plan most knowledge workers actually need. It adds the full desktop Office suite to everything in E1, plus a 100 GB mailbox, unlimited archiving, Data Loss Prevention, and eDiscovery. After the July 2026 increase, the e3 license cost is $26 per user per month, up from $23. That makes it the single most common assignment in a mid-market tenant.
For most organizations, the Office 365 E3 license is the baseline assignment for any employee who works in Word, Excel, and Outlook on a daily basis and does not require advanced security tooling. The question is rarely whether E3 gives enough productivity. It usually does. The question is whether your compliance obligations push you past it.
Microsoft 365 E3: E3 Plus Windows and Advanced Management at $39
Microsoft 365 E3 is a different product from the Office 365 E3 license, and the naming causes constant confusion. Microsoft 365 E3 bundles the Office 365 E3 license with Windows 11 Enterprise, Intune for device management, and Entra ID P1 for conditional access. After July 2026 it costs $39 per user per month, and it now includes Defender for Office 365 Plan 1, which adds Safe Links and Safe Attachments at no extra charge.
That Defender addition matters more than it looks. It narrows the security gap between the Office 365 E3 license foundation and E5, which changes the upgrade calculus for organizations that were considering E5 purely for email threat protection.
Microsoft 365 E5: Full Security and Compliance Stack at $60 Per User Per Month
Microsoft 365 E5 is the complete traditional security and compliance stack before Copilot and Agent 365 bundling enters the picture. On top of everything in Microsoft 365 E3, it adds Defender for Endpoint Plan 2, Defender for Identity, Defender for Cloud Apps, Entra ID P2, Power BI Pro, advanced eDiscovery, Insider Risk Management, and Communication Compliance. The e5 license cost after July 2026 is $60 per user per month.
E5 also includes Phone System and Audio Conferencing for Teams, but PSTN Calling Plans are an additional purchase. If your organization needs full PSTN voice service, expect a separate add-on cost on top of E5.
E5 is where the conversation gets serious for regulated industries. The compliance features in E5 are not nice-to-have extras for a hospital network or a financial services firm. They are the controls that align with the safeguards regulators expect to see, even though no specific Microsoft SKU is required by HIPAA or any similar framework. The e3 vs e5 license decision, covered in detail below, almost always turns on whether those compliance capabilities map to your risk analysis.
Microsoft 365 E7: The New Frontier Suite at $99 Per User Per Month
Microsoft 365 E7 is the first new enterprise tier Microsoft has introduced since E5 launched in 2015. Announced on March 9, 2026 and generally available since May 1, 2026, E7 bundles Microsoft 365 E5, Microsoft 365 Copilot, Agent 365, and the Microsoft Entra Suite into a single SKU at $99 per user per month on annual commitment. There is also a version without Teams at $90.45 per user per month. For organizations weighing Copilot specifically, Microsoft’s license options for Microsoft 365 Copilot detail the eligible base plans.
The math on E7 is straightforward. Purchasing the four components separately would cost roughly $117 per user per month at July 2026 pricing ($60 E5 + $30 Copilot + $15 Agent 365 + $12 Entra Suite). E7 saves about $18 per seat for organizations that genuinely need all four. The honest question is whether you need all four. For an organization on E5 that wants Copilot for a subset of users and is not deploying AI agents in the next 12 months, E5 plus Copilot at $90 is cheaper than E7 at $99. E7 is the right tier for organizations actually committing to autonomous AI agents at scale, particularly in heavily regulated environments. Most mid-market companies in 2026 will not be there yet.
Business Premium: The Security Play for Organizations Under 300 Users at $22 Per User Per Month
Business Premium packs a surprising amount into one plan: full desktop Office, Intune device management, Entra ID P1, Defender for Business, and Defender for Office 365 Plan 1. It held at $22 per user per month in 2026. The catch is the hard cap of 300 users per tenant. Once you cross that line, you are moving to the E-series whether you planned to or not.
Business Standard: Productivity Without the Security Layer at $14 Per User Per Month
Business Standard gives you the full desktop Office suite, Exchange, Teams, and SharePoint, but none of the advanced security and device management that Business Premium layers on. After July 2026 it costs $14 per user per month. For an organization that takes security and compliance seriously, the gap between business standard vs business premium is not really about $8. It is about whether you have any managed device and threat protection at all.
M365 License Comparison Matrix
The table below is the m365 license matrix most decision-makers actually want: price, what you get, the user cap, and who each plan fits. All prices are per user per month and reflect July 2026 list pricing on annual commitment.
| Plan | Price (2026) | Desktop Office | Advanced Security | Compliance Tools | User Cap | Best Fit |
|---|---|---|---|---|---|---|
| Office 365 E1 | $10 | No | No | Basic | None | Light or shared users, web only |
| Business Standard | $14 | Yes | No | Basic | 300 | Small teams, productivity first |
| Business Premium | $22 | Yes | Yes (Defender for Business) | Moderate | 300 | Sub-300 orgs needing security |
| Office 365 E3 | $26 | Yes | Limited | DLP, eDiscovery | None | Standard knowledge workers |
| Microsoft 365 E3 | $39 | Yes | Yes (Defender P1) | Strong | None | Enterprise baseline with Windows |
| Microsoft 365 E5 | $60 | Yes | Full stack | Advanced | None | Regulated industries, security-mature orgs |
| Microsoft 365 E7 | $99 | Yes | Full stack + Entra Suite | Advanced + Agent governance | None | AI-agent-driven enterprises |
E3 vs E5 License: When the Upgrade Is Actually Justified
This is the most consequential decision in the lineup, and the most overspent. But before debating it, the “E3 vs E5” question has to be framed precisely, because there is more than one upgrade path and they each have a different price gap.
| Upgrade Path | From | To | Monthly Gap |
|---|---|---|---|
| Office 365 E3 to Office 365 E5 | $26 | $41 | $15 per user |
| Microsoft 365 E3 to Microsoft 365 E5 | $39 | $60 | $21 per user |
| Office 365 E3 to Microsoft 365 E5 | $26 | $60 | $34 per user |
The $21 gap is the one most enterprises actually face, because they are already on Microsoft 365 E3 (which includes Windows 11 Enterprise and Intune) and considering the jump to Microsoft 365 E5. At that gap, across 1,000 users, the upgrade is $252,000 per year. Nobody should pay that premium reflexively, and nobody in a regulated sector should avoid it reflexively either.
E5 earns its price in three situations. The first is regulatory: if you operate under HIPAA, SOC 2, or similar frameworks, the Insider Risk Management, Communication Compliance, advanced audit, and eDiscovery Premium in E5 are capabilities that map to controls your auditors expect to see, even though HIPAA itself does not require any specific SKU. The second is security maturity: if you are building a real threat detection capability, the Defender for Endpoint Plan 2 and Defender for Identity in E5 replace tools you would otherwise buy separately, often at higher combined cost. The third is bundled productivity: Power BI Pro and Phone System are included in E5, and organizations already paying for those separately can consolidate.
The practical answer for most mid-market organizations is a mixed deployment. Your finance, compliance, and executive teams may need E5. Your general workforce may be fine on E3. Microsoft lets you assign different license types across users in the same tenant, so an E3 seat and an E5 seat can sit side by side, and a proper audit identifies exactly who needs what. We have run migrations where this segmentation alone funded the entire engagement.
To put scale behind that point: when we migrated CityMD from G-Suite to Microsoft 365, more than 3,500 users moved with zero downtime and zero data loss. License segmentation was part of that work, not an afterthought, because getting the tier right per user is what keeps a migration of that size from becoming a budget overrun.
Microsoft 365 License Recommendation by Role
The cleanest way to think about a mid-market or enterprise tenant is not to pick one license, but to map license to role. The table below is the starting framework we use with clients, adjusted in every engagement to the organization’s actual risk analysis and workload.
| Role | Typical License | Why |
|---|---|---|
| Executives (CEO, CFO, COO, CIO, CISO) | Microsoft 365 E5 | High-sensitivity communications, advanced audit, mobile and identity protection |
| Finance, legal, HR | Microsoft 365 E5 | Insider Risk Management, Communication Compliance, eDiscovery Premium |
| Compliance, privacy, audit teams | Microsoft 365 E5 | Advanced compliance tooling is the core of their workflow |
| Clinicians handling PHI (healthcare) | Microsoft 365 E5 | Data governance and audit controls aligned with HIPAA risk analysis |
| General knowledge workers | Microsoft 365 E3 | Desktop Office, device management, Defender baseline |
| Frontline and shared-device users | F1 or F3 | Web-based productivity, no desktop install needed |
| Contractors, short-term collaborators | Office 365 E1 or F-series | Limited access, lower cost, can be revoked cleanly |
| Education faculty and administration | A3 or A5 | A-series equivalents to E3 and E5 at education pricing |
| AI-agent-driven roles (where applicable) | Microsoft 365 E7 | Includes Copilot and Agent 365 if AI agents are genuinely in scope |
This is a starting point, not a prescription. The right mix for any organization comes out of an actual audit against the current user population, the workloads in use, and the compliance obligations on the table.
Business Premium vs E3: The Decision Mid-Market Companies Get Wrong
For organizations sitting near the 300-user line, the business premium vs e3 question is where money quietly leaks. Business Premium is the better value below 300 users because it bundles device management and security that you would otherwise buy as add-ons. The mistake is staying on Business Premium as you grow, splitting the tenant, or running workarounds to dodge the user cap.
Once you are clearly past 300 users and growing, Microsoft 365 E3 (built on the Office 365 E3 license) is the cleaner foundation, and Microsoft itself positions it as the primary recommended path for enterprise customers. It removes the cap, adds Windows 11 Enterprise, and after July 2026 carries the same Defender for Office 365 Plan 1 protection that Business Premium offers. The migration from Business Premium to E3 is straightforward, but it should be deliberate, mapped to headcount projections rather than triggered by hitting a wall.
Microsoft 365 Licensing for Healthcare Organizations
Healthcare is the clearest case where the license decision and the compliance posture intersect. The HIPAA Security Rule is technology-neutral and requires safeguards proportional to the organization’s risk analysis. The Insider Risk Management, Communication Compliance, and advanced eDiscovery capabilities in E5 do not satisfy HIPAA on their own, but they map directly to the kinds of administrative and technical safeguards that a risk-aligned compliance program needs to demonstrate. A hospital network or multi-site provider running its clinical and administrative staff entirely on the Office 365 E3 license may be carrying capability gaps that its own risk analysis would flag as material.
That does not mean every seat needs E5. It means the seats that touch protected health information, handle compliance, or sit in leadership often do, while shared clinical workstations and frontline staff may belong on F-series or E1 plans. We have built this exact segmentation for healthcare clients including multi-site provider groups, and the pattern holds: a small share of users on E5 for compliance, the majority on the Office 365 E3 license, and frontline staff on F-series. The licensing review is what tells you where each line falls.
Microsoft 365 Licensing for Education
Education institutions have their own track. Microsoft offers A-series plans, A1, A3, and A5, that mirror the E-series at education pricing for qualifying institutions. A1 is free for web-based use, A3 maps roughly to the Office 365 E3 license, and A5 maps to E5 with the full security and compliance stack.
The complication for education is mixed environments. Faculty and administrative staff handling student records, financial aid data, and research often have requirements that look more like enterprise than classroom. Knowing when an education tenant should layer enterprise-grade controls onto its A-series base, and which staff need them, is the same audit discipline that mid-market companies need. The data sensitivity is just as real.
How to Audit Your Microsoft 365 Licenses Before the July 2026 Increase
If your renewal lands after July 1, 2026, a focused audit before you sign is the highest-return hour your IT team will spend this quarter. The process is straightforward.
- Pull the full license assignment report from your admin center and map every active user to their current tier, from E1 up through E5 or E7.
- Flag the misfits: Office 365 E1 license seats that should be F-series or E3, Office 365 E3 license seats in compliance-sensitive roles that may need E5, and any Business Premium tenant approaching the 300-user cap.
- Map your compliance obligations to the features that satisfy them, then identify which users genuinely require E5-level controls and which do not.
- Model the cost of your optimized mix against the July 2026 pricing, and time your renewal to lock in the structure before the increase compounds.
Exelegent runs this licensing review for organizations in the 250 to 5,000 employee range, typically inside two weeks, and as a Microsoft Solutions Partner and CSP we can also restructure how you purchase once the right mix is clear.
Frequently Asked Questions
How much does an Office 365 E3 license cost per user per month?
After the July 1, 2026 price increase, Office 365 E3 costs $26 per user per month on an annual commitment, up from $23. Microsoft 365 E3, a separate and more complete plan that adds Windows 11 Enterprise and advanced management, costs $39 per user per month.
What is the difference between an E3 and E5 license?
E3 covers desktop Office, email, and core management and compliance tools. E5 adds the full advanced security stack, including Defender for Endpoint Plan 2, Defender for Identity, Insider Risk Management, Communication Compliance, advanced eDiscovery, Phone System with Audio Conferencing (PSTN Calling Plan sold separately), and Power BI Pro. The price gap depends on which path: Microsoft 365 E3 to Microsoft 365 E5 is $21 per user per month, Office 365 E3 to Office 365 E5 is $15, and Office 365 E3 to Microsoft 365 E5 is $34. E5 is generally justified for regulated industries and organizations building mature security operations.
Should a 500-employee company choose Business Premium or E3?
Business Premium is capped at 300 users per tenant, so a 500-employee organization cannot run entirely on it. Microsoft 365 E3, built on the Office 365 E3 license, is the appropriate foundation at that size, with E5 layered onto users who have compliance or advanced security requirements.
What changed for Microsoft 365 E3 in July 2026?
Microsoft 365 E3 rose to $39 per user per month and now includes Defender for Office 365 Plan 1, which adds Safe Links and Safe Attachments. Office 365 E3 rose to $26. The added Defender protection narrows the security gap with E5.
How does Microsoft 365 licensing work for healthcare organizations?
The HIPAA Security Rule is technology-neutral, but healthcare organizations with HIPAA obligations typically map E5 capabilities to the controls their risk analysis identifies, specifically Insider Risk Management, Communication Compliance, and advanced eDiscovery, for users who handle protected health information and compliance. A mixed deployment is common, with compliance-sensitive and leadership users on E5 and general staff on E3 or F-series.
Is there a benefit to buying Microsoft 365 through a Microsoft CSP partner?
Buying through a Cloud Solution Provider gives you a single point of accountability for licensing, billing, and support, along with guidance on the right license mix for your environment. A CSP partner can restructure how you purchase to match an optimized license plan rather than leaving you on a default tier mix.
What is Microsoft 365 E7 and is it worth the upgrade?
Microsoft 365 E7, branded the Frontier Suite, became generally available on May 1, 2026 at $99 per user per month. It bundles Microsoft 365 E5, Microsoft 365 Copilot, Agent 365, and the Microsoft Entra Suite into a single SKU. Buying those components separately would cost roughly $117 per user per month, so E7 saves about $18 per seat for organizations that genuinely need all four. For organizations that want Copilot for a subset of users and are not deploying AI agents in the next 12 months, E5 plus Copilot remains cheaper than E7. E7 is the right tier when AI agents are actually in scope.
