| Feature | Microsoft 365 E5 ✕ | Microsoft 365 E3 ✕ |
|---|---|---|
| Key questions | ||
| Conditional access Entra ID Premium sign-in policies | P2 | P1 |
| Endpoint protection Microsoft Defender on devices | Plan 2 | Plan 1 |
| Email threat protection Defender for Office 365 | Plan 2 | Plan 1 |
| Data loss prevention Stop sensitive data leaving | ✓ | — |
| eDiscovery Legal hold and investigations | ✓ | — |
| Insider risk Detect risky user activity | ✓ | — |
| Teams Phone Cloud phone system | ✓ | — |
| Power BI Pro Reports and dashboards | ✓ | — |
| Meetings & voice | ||
| Audio conferencing | ✓ | — |
| Teams Phone (PBX) | ✓ | — |
| Office apps | ||
| Excel advanced analytics | ✓ | — |
| Identity & access | ||
| Entra ID P2 (Identity Protection, PIM) | ✓ | — |
| Threat protection | ||
| Cloud App Security for Office 365 | ✓ | — |
| Defender for Endpoint (Plan 1) | — | ✓ |
| Defender for Endpoint (Plan 2) | ✓ | — |
| Defender for Identity | ✓ | — |
| Defender for IoT | ✓ | — |
| Defender for Office 365 (Plan 2) | ✓ | — |
| Microsoft 365 Defender (XDR) | ✓ | — |
| Information protection & compliance | ||
| Advanced auditing | ✓ | — |
| Communication compliance | ✓ | — |
| Customer Key | ✓ | — |
| Customer Lockbox | ✓ | — |
| Data loss prevention (DLP) | ✓ | — |
| eDiscovery & investigations | ✓ | — |
| Information barriers | ✓ | — |
| Insider risk management | ✓ | — |
| Privileged access management | ✓ | — |
| Records & information governance | ✓ | — |
| Analytics & automation | ||
| Power BI | ✓ | — |
Capabilities group Microsoft's service plans into what your users actually get. Switch to Technical detail for the raw service plans.