| Feature | Enterprise Mobility + Security E5_USGOV_GCCHIGH ✕ |
|---|---|
| Key questions | |
| Business email Exchange Online mailbox & calendar | — |
| Teams Chat, meetings and channels | — |
| SharePoint & OneDrive Intranet, team sites, file storage | — |
| Office apps Word, Excel, PowerPoint, Outlook | — |
| Conditional access Entra ID Premium sign-in policies | P2 |
| Device management Intune for laptops and phones | ✓ |
| Endpoint protection Microsoft Defender on devices | — |
| Email threat protection Defender for Office 365 | — |
| Data loss prevention Stop sensitive data leaving | — |
| eDiscovery Legal hold and investigations | — |
| Insider risk Detect risky user activity | — |
| Teams Phone Cloud phone system | — |
| Power BI Pro Reports and dashboards | — |
| Windows Enterprise Enterprise edition licence | — |
| Identity & access | |
| Entra ID P1 (Conditional Access, SSO) | ✓ |
| Entra ID P2 (Identity Protection, PIM) | ✓ |
| Multi-factor authentication | ✓ |
| Devices & management | |
| Intune (full device management) | ✓ |
| Threat protection | |
| Defender for Cloud Apps | ✓ |
| Defender for Identity | ✓ |
| Information protection & compliance | |
| Information protection & encryption | ✓ |
Capabilities group Microsoft's service plans into what your users actually get. Switch to Technical detail for the raw service plans.