Microsoft Agent 365 has been available since May 1, 2026. What is already in your license, what costs extra, and when the control plane is actually worth it.
The call is landing on many managing directors' desks right now: the Microsoft partner recommends Microsoft Agent 365, the new control plane for AI agents, generally available since May 1, 2026. That sounds convincing, because by now almost every business has an agent running somewhere that nobody manages properly. Whether it is worth it for 20 to 50 people, however, comes down to one detail: a good part of what Agent 365 is sold for is already included in your existing license.
Microsoft Agent 365 is a central control plane that lets organizations discover, manage, govern, and secure AI agents, regardless of whether the agents were built on Microsoft platforms or bought in from third parties. Since May 1, 2026, the service has been generally available for the commercial segment and is licensed per user (Microsoft Learn, Overview of Microsoft Agent 365).
The product consists of a registry as the overall directory of all agents, including shadow agents, access control via Microsoft Entra, a visualization of the relationships between agents, people, and data, and a security layer made up of Defender and Purview. Agents from Copilot Studio automatically appear in the registry, send telemetry, and receive an Entra Agent ID (Microsoft Learn, Get started with Microsoft Agent 365).
The agent registry and the basic governance actions are, according to Microsoft's own feature table, already included in the Microsoft 365 plans for Enterprise, Business, Education, and Frontline, including Business Premium, without an Agent 365 license. Of the 26 rows in this table, exactly 4 are included in the standard plans; the remaining 22 require E7 or an Agent 365 license (Microsoft Learn, Service Description Agent 365). This is the decisive dividing line for the purchase decision.
In short: the answer to the question "which agents are actually running here, and who is allowed to switch them off?" you already get today, without spending an extra euro. What you pay for is the depth underneath, meaning logging, runtime protection, granular policies, and the ability to provide evidence.
Agent 365 is licensed per user, not per agent. All agents that a licensed user manages or owns are covered by that user's license; the agents themselves do not need a license of their own (Microsoft Learn, Agent 365 FAQ). That sounds affordable, and for small businesses it is still the point where the math tips, because in the SME sector licenses rarely stay cleanly limited to individual people.
On top of that comes the prerequisite, and it has just changed. Since June 1, 2026, the following applies to new Agent 365 purchases: enterprise customers need Microsoft 365 E5, small and medium businesses need Microsoft 365 Business Premium, and frontline users need Defender and Purview at F5 level. Without this prerequisite, customers may, according to Microsoft, not have access to certain Agent 365 features (Microsoft Learn, Partner Center Announcements June 2026). E7 is not affected by this, because it already includes E5, Copilot, Agent 365, and the Entra Suite.
For SMEs this is both good news and bad news. Good: anyone on Business Premium meets the SMB prerequisite and does not have to switch to E5. Bad: some of the advertised protection features depend on Entra capabilities that Microsoft ties to E7, or to E5 plus Agent 365. Without E5 or E7, Conditional Access, ID Protection, and network controls for agents only work through separately purchased Entra licenses (Microsoft Learn, Microsoft Entra licensing). The Agent 365 license is therefore rarely the only line item on the bill.
We deliberately do not quote a euro price here: list prices change faster than a blog post ages. Have the figure quoted for your actual number of users before you do the math. How strongly license tiers shift the bill is shown by the comparison of Business Premium, E3, and E5 for automation, and for the Copilot licensing jungle the same pattern applies.
For most businesses of this size, the honest answer is: probably not yet. If your agents are manageable in number, run within Copilot Studio or Microsoft 365, a named person releases and switches them off, and no particularly sensitive data is involved, the registry from your existing license already solves your problem.
It gets interesting as soon as one of these sentences applies: you do not know how many AI tools are running in the business units. Third-party agents are in use. Your agents handle HR, health, or client data. You need to be able to prove to an auditor what an agent did and when. In that case you are not buying convenience, you are buying the ability to provide evidence, and that is hard to improvise after the fact.
From our consulting practice we know one sequence above all that goes wrong: the control plane gets licensed first, and only then does it become clear that nobody has defined which agent should have which access. A tool that enforces policies is worthless as long as there is no policy. That is why our AI consulting starts with a stocktake instead of an order: which agents are running, who is responsible, which data is affected. Only after that can you judge whether the four included rows of the feature table are enough, or whether the 22 paid ones are needed. We have described the sprawl behind it separately. Agent 365 is one possible answer to that, but only one, and it only works once the groundwork has been done beforehand. Anyone who is considering their own AI agents anyway should settle both questions in the same decision.
Not as a small or medium-sized business. Since June 1, 2026, Microsoft 365 Business Premium applies as the SMB prerequisite for new purchases; enterprise customers need E5. Without E5 or E7, however, the Entra protection features for agents are only covered through separately purchased Entra licenses.
No. In its generally available version, Agent 365 is licensed per user. All agents that a licensed user manages or owns are covered by that user's license, regardless of their type. The agents themselves do not need a license of their own.
Yes. The inventory in the agent registry and basic governance, meaning blocking, deleting, sharing, and reassigning owners, are, according to Microsoft's feature table, already included in the regular Microsoft 365 plans. Policy templates, telemetry, tool control, and the Purview and Defender features come at extra cost.
Both exist side by side. General availability for the commercial segment has existed since May 1, 2026. Alongside it, the Frontier program runs as a preview without a service-level commitment, which Microsoft explicitly does not recommend for product evaluation. Anyone deciding today should go by the GA feature set.
Not much, as long as the number of agents is small and responsibility is clear. Postponing becomes expensive at one point: logs only start being generated from the day they are switched on. Anyone who later needs to prove what an agent did months ago cannot activate that retroactively.
Founder of NordFlux. Spent four years automating processes at enterprise scale at Dräger, and now brings that depth to the mid-market — pragmatic and with full data sovereignty.
Certifications
Every department builds its own AI agent, and no one has an overview. Why agent sprawl is a control problem, not an AI problem.
Microsoft 365 E7 has been available since May 1, 2026: E5, Copilot, Entra Suite, and Agent 365 in a single SKU. What it contains and who it pays off for.
An AI agent pursues a goal independently: it decides on the steps, uses tools, and carries out the process. Definition, examples, and limits.
Since May 2026, Microsoft's Agent 365 promises central control over AI agents, but whether the additional cost pays off for a business with 20 to 50 employees depends on how many agents are actually in use. NordFlux checks with you what your existing licence already covers and whether Agent 365 is worth the extra cost for your situation. In an initial conversation, we assess your current and planned agent usage.
