Microsoft Agent 365: Is the Governance Control Plane Worth It for SMEs?

The call is landing on many managing directors' desks right now: the Microsoft partner recommends Microsoft Agent 365, the new control plane for AI agents, generally available since May 1, 2026. That sounds convincing, because by now almost every business has an agent running somewhere that nobody manages properly. Whether it is worth it for 20 to 50 people, however, comes down to one detail: a good part of what Agent 365 is sold for is already included in your existing license.

What is Microsoft Agent 365, and since when has it been available?

Microsoft Agent 365 is a central control plane that lets organizations discover, manage, govern, and secure AI agents, regardless of whether the agents were built on Microsoft platforms or bought in from third parties. Since May 1, 2026, the service has been generally available for the commercial segment and is licensed per user (Microsoft Learn, Overview of Microsoft Agent 365).

The product consists of a registry as the overall directory of all agents, including shadow agents, access control via Microsoft Entra, a visualization of the relationships between agents, people, and data, and a security layer made up of Defender and Purview. Agents from Copilot Studio automatically appear in the registry, send telemetry, and receive an Entra Agent ID (Microsoft Learn, Get started with Microsoft Agent 365).

What is already included in your license, and what only comes with Agent 365?

The agent registry and the basic governance actions are, according to Microsoft's own feature table, already included in the Microsoft 365 plans for Enterprise, Business, Education, and Frontline, including Business Premium, without an Agent 365 license. Of the 26 rows in this table, exactly 4 are included in the standard plans; the remaining 22 require E7 or an Agent 365 license (Microsoft Learn, Service Description Agent 365). This is the decisive dividing line for the purchase decision.

• Already included without Agent 365: An inventory of all agents in the registry in the Microsoft 365 admin center, basic governance such as blocking, deleting, sharing, assigning to users or groups, and transferring ownership, rule-based automation for lifecycle actions, and syncing external agents into the registry.
• Only with E7 or an Agent 365 license: Policy templates, observability and telemetry on agent behavior, tenant-wide control over which tools and MCP servers an agent may call, Graph API access to the registry, Entra Access Packages and Conditional Access for agents, Purview audit logs, eDiscovery, DLP, and Insider Risk Management, Defender runtime protection, and Intune device compliance.

In short: the answer to the question "which agents are actually running here, and who is allowed to switch them off?" you already get today, without spending an extra euro. What you pay for is the depth underneath, meaning logging, runtime protection, granular policies, and the ability to provide evidence.

What does Microsoft Agent 365 really cost?

Agent 365 is licensed per user, not per agent. All agents that a licensed user manages or owns are covered by that user's license; the agents themselves do not need a license of their own (Microsoft Learn, Agent 365 FAQ). That sounds affordable, and for small businesses it is still the point where the math tips, because in the SME sector licenses rarely stay cleanly limited to individual people.

On top of that comes the prerequisite, and it has just changed. Since June 1, 2026, the following applies to new Agent 365 purchases: enterprise customers need Microsoft 365 E5, small and medium businesses need Microsoft 365 Business Premium, and frontline users need Defender and Purview at F5 level. Without this prerequisite, customers may, according to Microsoft, not have access to certain Agent 365 features (Microsoft Learn, Partner Center Announcements June 2026). E7 is not affected by this, because it already includes E5, Copilot, Agent 365, and the Entra Suite.

For SMEs this is both good news and bad news. Good: anyone on Business Premium meets the SMB prerequisite and does not have to switch to E5. Bad: some of the advertised protection features depend on Entra capabilities that Microsoft ties to E7, or to E5 plus Agent 365. Without E5 or E7, Conditional Access, ID Protection, and network controls for agents only work through separately purchased Entra licenses (Microsoft Learn, Microsoft Entra licensing). The Agent 365 license is therefore rarely the only line item on the bill.

We deliberately do not quote a euro price here: list prices change faster than a blog post ages. Have the figure quoted for your actual number of users before you do the math. How strongly license tiers shift the bill is shown by the comparison of Business Premium, E3, and E5 for automation, and for the Copilot licensing jungle the same pattern applies.

Is Agent 365 worth it for a business with 20 to 50 employees?

For most businesses of this size, the honest answer is: probably not yet. If your agents are manageable in number, run within Copilot Studio or Microsoft 365, a named person releases and switches them off, and no particularly sensitive data is involved, the registry from your existing license already solves your problem.

It gets interesting as soon as one of these sentences applies: you do not know how many AI tools are running in the business units. Third-party agents are in use. Your agents handle HR, health, or client data. You need to be able to prove to an auditor what an agent did and when. In that case you are not buying convenience, you are buying the ability to provide evidence, and that is hard to improvise after the fact.

From our consulting practice we know one sequence above all that goes wrong: the control plane gets licensed first, and only then does it become clear that nobody has defined which agent should have which access. A tool that enforces policies is worthless as long as there is no policy. That is why our AI consulting starts with a stocktake instead of an order: which agents are running, who is responsible, which data is affected. Only after that can you judge whether the four included rows of the feature table are enough, or whether the 22 paid ones are needed. We have described the sprawl behind it separately. Agent 365 is one possible answer to that, but only one, and it only works once the groundwork has been done beforehand. Anyone who is considering their own AI agents anyway should settle both questions in the same decision.

Frequently asked questions

Do I need Microsoft 365 E5 to use Agent 365?

Not as a small or medium-sized business. Since June 1, 2026, Microsoft 365 Business Premium applies as the SMB prerequisite for new purchases; enterprise customers need E5. Without E5 or E7, however, the Entra protection features for agents are only covered through separately purchased Entra licenses.

Does every AI agent cost its own Agent 365 license?

No. In its generally available version, Agent 365 is licensed per user. All agents that a licensed user manages or owns are covered by that user's license, regardless of their type. The agents themselves do not need a license of their own.

Can I see my AI agents in the admin center even without Agent 365?

Yes. The inventory in the agent registry and basic governance, meaning blocking, deleting, sharing, and reassigning owners, are, according to Microsoft's feature table, already included in the regular Microsoft 365 plans. Policy templates, telemetry, tool control, and the Purview and Defender features come at extra cost.

Is Agent 365 finished, or still in preview?

Both exist side by side. General availability for the commercial segment has existed since May 1, 2026. Alongside it, the Frontier program runs as a preview without a service-level commitment, which Microsoft explicitly does not recommend for product evaluation. Anyone deciding today should go by the GA feature set.

What happens if we postpone the decision by a year?

Not much, as long as the number of agents is small and responsibility is clear. Postponing becomes expensive at one point: logs only start being generated from the day they are switched on. Anyone who later needs to prove what an agent did months ago cannot activate that retroactively.