| Feature | Microsoft 365 Business Premium ✕ | Microsoft 365 E3 ✕ | Microsoft 365 E5 ✕ |
|---|---|---|---|
| Key questions | |||
| Conditional access Entra ID Premium sign-in policies | P1 | P1 | P2 |
| Endpoint protection Microsoft Defender on devices | Business | Plan 1 | Plan 2 |
| Email threat protection Defender for Office 365 | Plan 1 | Plan 1 | Plan 2 |
| Data loss prevention Stop sensitive data leaving | ✓ | — | ✓ |
| eDiscovery Legal hold and investigations | ✓ | — | ✓ |
| Insider risk Detect risky user activity | — | — | ✓ |
| Teams Phone Cloud phone system | — | — | ✓ |
| Power BI Pro Reports and dashboards | — | — | ✓ |
| Windows Enterprise Enterprise edition licence | — | ✓ | ✓ |
| Email & collaboration | |||
| Email archiving & retention | ✓ | — | — |
| Meetings & voice | |||
| Audio conferencing | — | — | ✓ |
| Teams Phone (PBX) | — | — | ✓ |
| Office apps | |||
| Excel advanced analytics | — | — | ✓ |
| Identity & access | |||
| Entra ID P2 (Identity Protection, PIM) | — | — | ✓ |
| Devices & management | |||
| Windows Enterprise | — | ✓ | ✓ |
| Threat protection | |||
| Cloud App Security for Office 365 | — | — | ✓ |
| Defender for Endpoint (Plan 1) | — | ✓ | — |
| Defender for Endpoint (Plan 2) | — | — | ✓ |
| Defender for Identity | — | — | ✓ |
| Defender for IoT | — | — | ✓ |
| Defender for Office 365 (Plan 2) | — | — | ✓ |
| Microsoft 365 Defender (XDR) | — | — | ✓ |
| Information protection & compliance | |||
| Advanced auditing | — | — | ✓ |
| Communication compliance | — | — | ✓ |
| Customer Key | — | — | ✓ |
| Customer Lockbox | — | — | ✓ |
| Data loss prevention (DLP) | ✓ | — | ✓ |
| eDiscovery & investigations | ✓ | — | ✓ |
| Information barriers | — | — | ✓ |
| Insider risk management | — | — | ✓ |
| Privileged access management | — | — | ✓ |
| Records & information governance | — | — | ✓ |
| Sensitivity labels & classification | — | ✓ | ✓ |
| Analytics & automation | |||
| Power BI | — | — | ✓ |
| Business applications (Dynamics 365) | |||
| Dynamics 365 (business applications) | ✓ | — | — |
Capabilities group Microsoft's service plans into what your users actually get. Switch to Technical detail for the raw service plans.