Microsoft 365 E7 Mixed Tier Licensing Strategy: Optimise Cost Across E1, E3, E5 and E7

Why Mixed Tier Licensing Is the Right Default

Microsoft's sales motion for E7 is straightforward: upgrade everyone. The simplicity of universal deployment — one SKU, one price, no role analysis — is genuinely appealing for IT teams managing large populations. But simplicity here has a direct cost: paying $99 per user per month for capabilities that a significant portion of your workforce will never use.

The Microsoft 365 SKU stack runs E1 at $10.50, E3 at $39, E5 at $60, and E7 at $99 per user per month (2026 list prices). The $59-per-user gap between E1 and E7, and the $60-per-user gap between E3 and E7, mean that misassigning even a fraction of your user population to a higher tier than they need generates substantial waste. At 5,000 users, assigning all users E7 when only 40 percent genuinely need it costs $2,124,000 per year more than a properly tiered model. That is not a rounding error — it is a material overspend that accrues every year of the EA term.

Mixed tier licensing is supported natively by Microsoft's EA structure. There is no requirement for licence uniformity across a tenant. E1, E3, E5, and E7 can coexist within the same organisation and the same Microsoft 365 tenant, with each user assigned the tier that matches their requirements. Microsoft's licensing FAQ confirms that mixing Business Premium with E3 and E5 is compliant, and the same principle extends to E7.

The Four Tier Profiles: Matching Users to SKUs

The starting point for mixed tier strategy is a clear articulation of what each tier provides and which user profiles it serves. The analysis below uses post-July 2026 pricing.

E1 — $10.50: The Light User Tier

E1 provides cloud-only productivity: Teams, SharePoint, OneDrive (1 TB), Exchange Online with a 50 GB mailbox, and web and mobile Office apps only. No desktop applications, no advanced security, no compliance features. E1 is the right licence for shared workstation users, manufacturing floor personnel who need Teams access on shared devices, retail associates who need a company email and basic Teams, and any role where a full knowledge worker productivity suite is neither required nor used. At $10.50 per user per month, E1 is a significant underspend relative to E3 or above for roles that genuinely fit this profile.

E3 — $39: The Standard Knowledge Worker Tier

E3 adds desktop Microsoft 365 Apps, a 100 GB Exchange mailbox with archiving, Microsoft Intune device management, Azure Information Protection P1, Entra ID P1 for Conditional Access, and Windows 11 Enterprise rights. E3 is the right licence for standard knowledge workers — accountants, HR professionals, project managers, operations staff, and the broad middle of any enterprise organisation who need the full Office suite, cloud email, and basic security without advanced threat protection or AI productivity features. E3 at $39 per user per month serves this population well and avoids paying the E5 security premium for users who do not need it.

E5 — $60: The Security and Compliance Tier

E5 adds the full advanced security and compliance stack: Defender for Office 365 P2, Defender for Identity, Defender for Cloud Apps, Entra ID P2, Microsoft Purview eDiscovery, Insider Risk Management, Communication Compliance, Power BI Pro, and audio conferencing. E5 is right for users in regulated roles with advanced security requirements — finance executives, IT and security teams, compliance officers, legal counsel, executives, and any population in regulated business units where the Purview compliance capabilities or advanced Defender protections are genuinely required. E5 is not the top tier — that is E7 — but it remains the right choice for users where advanced security and compliance matter more than AI productivity.

E7 — $99: The AI and Agentic Tier

E7 adds Microsoft 365 Copilot, Agent 365 governance, Work IQ, and Microsoft Entra Suite on top of E5. E7 is the right licence for users where AI productivity tools will generate meaningful workflow value — knowledge-intensive workers with high document creation, analysis, communication, and meeting loads — and for IT, security, and technical users who need the advanced Entra Suite Zero Trust capabilities or will be administering the Agent 365 agentic governance infrastructure. E7 is also appropriate for executives and knowledge leaders who benefit most from Copilot's meeting intelligence, email management, and document synthesis capabilities.

Role-Based Assignment Framework

A practical mixed tier strategy begins with a role taxonomy that maps each job function to its optimal M365 tier. The following framework is drawn from our experience across 200+ Microsoft EA engagements.

E7 Role Cluster: High AI Value, Complex Security

These roles consistently justify E7 economics: management consultants and analysts (high document, research, and communication volume), lawyers and legal professionals (contract drafting, research synthesis, eDiscovery), finance and FP&A teams (Excel-intensive analysis, financial modelling, reporting cycles), marketing and content roles (copywriting, campaign briefs, creative production), product managers (specification writing, stakeholder communication, meeting-heavy workloads), senior and executive leadership (email volume, meeting summarisation, cross-functional communication), IT architects and security engineers (Entra Suite ZTNA, Agent 365 administration, advanced Defender deployment), and compliance officers (Purview advanced capabilities, communication compliance, audit workflows).

In most enterprise organisations, this cluster represents 30 to 50 percent of the total user population. Assigning E7 to this group and E3 or E5 to others delivers the AI productivity benefit where it generates genuine ROI without paying the E7 premium for the remaining population.

E5 Role Cluster: Security and Compliance Without AI Priority

These roles need the advanced security and compliance capabilities in E5 but derive limited additional productivity value from Copilot: security operations team members who work in dedicated security tooling rather than M365 productivity apps, compliance analysts with regulatory reporting requirements, internal audit, risk management, and any regulated-function role where Purview eDiscovery or Insider Risk Management capabilities matter but AI-assisted drafting does not align to daily workflows. E5 at $60 per user per month is the right tier, avoiding the additional $39 per user per month for Copilot capabilities they will not use.

E3 Role Cluster: Standard Productivity

Standard knowledge workers without advanced security requirements or AI productivity alignment: HR generalists, facilities management, operations and logistics coordinators, finance support roles, IT support staff, customer service representatives with standard communication needs, and any role where the full Office suite, email, and Teams covers the full capability requirement. E3 at $39 per user per month covers this population without paying for security or AI capabilities they do not need.

E1 Role Cluster: Light Access

Roles where cloud communication and collaboration on shared devices is the full requirement: manufacturing operators, retail floor staff, warehouse workers, security and facilities personnel, and part-time employees with limited computing requirements. Service accounts, conference room accounts, and shared mailboxes also belong in this tier. E1 at $10.50 per user per month covers this population at minimum cost.

Cost Modelling: Mixed Tier vs Universal E7

A worked example for a 5,000-user enterprise with a representative role distribution illustrates the magnitude of mixed tier savings.

Example Population Split

The 5,000-user population breaks down as: E7 users (35 percent, 1,750 users) — knowledge workers, executives, IT architects; E5 users (15 percent, 750 users) — security, compliance, regulated roles; E3 users (40 percent, 2,000 users) — standard knowledge workers; E1 users (10 percent, 500 users) — light users, shared accounts.

Mixed Tier Annual Cost

At list prices: 1,750 × $99 × 12 = $2,079,000; 750 × $60 × 12 = $540,000; 2,000 × $39 × 12 = $936,000; 500 × $10.50 × 12 = $63,000. Total list price annual cost: $3,618,000.

Universal E7 Annual Cost

5,000 × $99 × 12 = $5,940,000.

Annual Saving

Mixed tier saves $2,322,000 per year versus universal E7 at list prices, or $6,966,000 over a three-year EA term. At negotiated EA pricing (10 to 20 percent discount), the absolute figures reduce but the proportional saving is maintained. This is the saving available without sacrificing any E7 capability for users who genuinely benefit from it — it is pure optimisation through accurate tier assignment.

Operational Implementation: Making Mixed Tiers Work

Mixed tier licensing introduces operational complexity that universal deployment avoids. Managing it effectively requires clear processes in three areas.

Licence Assignment Governance

Establish a licence assignment policy that maps job function to tier and documents the criteria for each tier boundary. This policy should be maintained by IT in coordination with HR, updated when roles change, and triggered automatically by the Joiner-Mover-Leaver process. Without a documented policy, licence assignments drift over time — managers request the highest tier for their teams, and the cost savings of mixed tier evaporate within six to twelve months of deployment. Microsoft Entra ID Governance — included in the E7 bundle for E7 users and available as a standalone add-on for others — supports automated licence lifecycle management through entitlement management policies.

True-Up Management

Microsoft Enterprise Agreements require an annual True-Up that reconciles actual deployed licence counts against the EA commitment. For mixed tier deployments, the True-Up requires accurate per-tier usage data, not just total M365 user count. Ensure your ITAM tooling or Microsoft 365 admin centre reporting captures per-tier active user counts on a monthly basis so True-Up calculations are based on actual tier usage rather than total assigned licences. Overpayment on True-Up is common in organisations without this monitoring discipline.

User Communication and Tier Transitions

Users assigned different tiers within the same organisation will notice the difference — E7 users have Copilot and E3 users do not. Communicate clearly why tier assignments reflect role requirements, not seniority. Establish a process for tier upgrade requests that requires business justification and manager approval, preventing the organisational pressure for uniform high-tier assignment that often drives unnecessary cost. Model the cost of requested upgrades explicitly: a manager requesting E7 for a 20-person team is authorising an additional $11,760 per year at list price, a number that changes the conversation from "everyone should have the best tools" to "let's evaluate the ROI for our team."

The E5-to-E7 Upgrade Decision: When to Move

The most common mixed tier decision in 2026 is not E3-to-E7 but E5-to-E7 for the existing E5 population. Microsoft field teams are actively presenting E7 as the natural next step for E5 customers at renewal. The upgrade question requires clear criteria.

Move E5 users to E7 when Copilot adoption data from a pilot or controlled deployment shows active usage above 50 percent of working hours for that user group, when Entra Suite Private Access will replace existing VPN infrastructure generating a measurable cost offset, when Agent 365 governance is required for live agentic deployments in that user group's workflows, or when competitive benchmarking confirms that peer organisations in the same industry are deploying E7 at comparable user density. Do not move E5 users to E7 based on Microsoft's projected ROI figures, vendor-led productivity studies applied to your context without adjustment, or the default position that newer is better. The $39-per-user-per-month upgrade decision requires evidence, not aspiration.

Negotiating Mixed Tier Commitments in the EA

Mixed tier licensing must be reflected explicitly in the EA structure. Each tier commitment is a separate line in the EA, with its own quantity, pricing, and True-Up treatment. When negotiating, secure pricing for all four tiers simultaneously — the leverage of the total commitment value applies across the bundle, not to each tier individually. Request fixed pricing for each tier across the EA term, including protection against the July 2026 price increases for tiers committed before that date. Negotiate downgrade flexibility for E7 to E5 in years two and three if Copilot adoption does not meet defined thresholds — this is a key protection against paying for underperforming AI investment. Our Microsoft EA advisory specialists structure these protections into every engagement we support.