The licensing roadmap for Copilot and agentic AI governance
E3 runs your business. E5 secures your users. E7 governs your AI. Here is the map.
Microsoft 365 E7 can stop sensitive data from reaching Claude, ChatGPT, Gemini, Perplexity, or any AI app you name — whether your users upload a file or paste text, in the browser or in the desktop app.
That is not marketing copy. These controls — Microsoft Purview DSPM for AI, Endpoint DLP, and Microsoft Entra Suite — are shipping today. Here is what each one does, and — because licensing is what we do at ESS — exactly which license unlocks each control.
What E7 blocks in practice
- ✓ Discover AI usage across the organization with Microsoft Purview DSPM for AI — which AI apps are in play and what data is at risk.
- ✓ Block sensitive file uploads to AI websites like Claude, ChatGPT, Gemini, and Perplexity using Purview Endpoint DLP on managed devices.
- ✓ Block sensitive text from being pasted into AI apps — and this is the part that matters most.
The headline: copy-paste protection, even in the desktop app
This is where E7 separates itself. With Microsoft Entra Suite (delivered through Global Secure Access), policy blocks Claude from accepting sensitive information entirely — files and anything copied and pasted. Because enforcement happens at the network layer rather than inside one browser, the same policy covers every browser and the Claude desktop app. Users cannot route around it by switching from Edge to Chrome, or from the website to the installed app.
Most data-protection stories stop at the browser. Real users work in desktop apps. Network-level enforcement through Entra Suite is the difference between a policy that looks good in a screenshot and one that actually holds.
Licensing prerequisites: what you need for each control
The licensing split is the part most organizations get wrong: most of the blocking above works on Microsoft 365 E5 — but the paste-blocking that covers both browser and desktop apps is an E7 capability, delivered by Entra Suite.
| Capability | Minimum licensing |
|---|---|
| DSPM for AI — discover AI app usage and assess data risk (Microsoft Purview) | Microsoft 365 E5 (included in E7) |
| Block sensitive file uploads and in-browser paste to AI websites on managed devices (Purview Endpoint DLP) | Microsoft 365 E5 (included in E7) |
| Block sensitive text pasted into AI apps — every browser and desktop apps (e.g., Claude Desktop) via Global Secure Access inline protection | Microsoft 365 E7 (Entra Suite included) — or Entra Suite / Entra Internet Access as an add-on (requires Entra ID P1) |
| Block access to unsanctioned AI apps outright + Shadow AI discovery (network-based) | Entra Internet Access — included in Entra Suite and E7 |
| Observe, govern, and secure AI agents (Agent 365) | Microsoft 365 E7, or per-user Agent 365 license (E5 recommended base) |
Sources: Global Secure Access licensing · Microsoft Entra licensing · Purview: prevent data leak to shadow AI · Agent 365 overview
What is Microsoft 365 E7?
Generally available since May 1, 2026, Microsoft 365 E7 is the “Frontier Suite”: Microsoft 365 E5, Microsoft 365 Copilot, and Agent 365 in a single SKU — plus Microsoft Entra Suite and advanced Defender, Intune, and Purview capabilities. The practical read: E5 secures your users; E7 adds agent governance and the full AI observability and governance stack, including the network-level data protection described above.
If your organization is serious about AI governance — not just for Copilot, but for third-party AI like Claude and ChatGPT — the Entra Suite inclusion alone changes the E5-vs-E7 math. Unmanaged devices and personal accounts remain the hard edge cases; sensitivity labels with encryption are the layer that travels with the data when device controls do not apply.
Not sure whether E5, E7, or an Entra Suite add-on is the right call?
Talk it through with an ESS licensing architect. We will map your current SKUs to the controls you actually need — before you pay for a bundle you do not.
Schedule a licensing consultation →Licensing details verified against official Microsoft Learn documentation as of June 6, 2026.