Microsoft Licensing FAQ: Top 50 Questions Answered by EA Specialists

An Enterprise Agreement (EA) is Microsoft's flagship volume licensing programme for organisations with at least 500 users or devices. It provides a 3-year commitment with volume pricing, annual True-Up reconciliation, and Software Assurance included. EAs deliver the best unit pricing available through Microsoft's traditional commercial channels.

The EA requires a minimum of 500 users or devices. Below that threshold, organisations typically use CSP, MPSA, or Open Value programmes instead.

Standard EA terms are 3 years. At expiry, the EA can be renewed for another 3 years or converted to another commercial vehicle such as MCA-E. You cannot exit an EA mid-term without penalty.

The True-Up is the annual reconciliation process under an EA. Once a year, you report all licence additions — new users, new products, expanded deployments — in the prior 12 months, and pay for them at your contracted EA unit rate. The True-Up window runs from 60 to 30 days before your EA anniversary date. It is a negotiating event, not just an admin process — scope disputes and right-sizing conversations belong here.

Current market EA discounts run 10–20% off list price. Historical norms of 15–25% have compressed as Microsoft has tightened NCE pricing floors. Discounts above 20% now require executive escalation and typically require a significant commercial commitment in return.

From 2025 onwards, Microsoft began rejecting new EA enrolments from some customer segments — particularly SMB — in favour of MCA-E (Microsoft Customer Agreement for Enterprise). For large enterprise accounts and most EMEA customers, the EA remains available, but Microsoft's preference is shifting toward MCA-E for new signings.

The MCA is Microsoft's preferred direct commercial model for 2026, replacing the EA for many segments. It is a flexible, evergreen agreement where product-specific terms are added dynamically as you subscribe to new services. Under MCA there are no True-Ups — you add seats when needed and pay in the next billing cycle. This gives Microsoft more pricing control than an EA, because you lose the leverage of a large upfront commitment negotiation.

NCE is the transactional framework underlying both MCA and CSP in 2026. It standardises subscription terms across monthly, annual, and 3-year commits, eliminates legacy volume tier (Level A–D) pricing for M365 and Dynamics 365, and requires all cloud product purchases to go through the NCE channel. If you buy Microsoft cloud products today, you are almost certainly on NCE.

NCE monthly commit = list price, no discount. NCE annual commit = up to 5% discount. 3-year commit = better discounts but locks you into a longer commitment. If you are on NCE monthly and paying list price across a large user count, switching to annual commit alone can produce material savings — though you sacrifice flexibility.

EA is generally better for buyers on two dimensions: deeper upfront discounts (10–20% vs NCE's 5% annual) and the True-Up mechanism, which provides a 12-month buffer before overage costs are due. MCA is easier to administer but gives buyers less negotiation leverage. If you are large enough for an EA, the EA typically delivers better commercial outcomes — provided you negotiate it properly.

The current M365 enterprise stack in order is: E1 → E3 → E5 → E7. E7 is the new highest-tier SKU, announced March 2026 and reaching general availability May 1, 2026 at $99/user/month. E7 bundles advanced AI, security, compliance, and the complete Intune Suite. E5 is no longer the top or most comprehensive SKU — E7 sits above it.

E7 is Microsoft's newest enterprise tier at $99/user/month (GA May 2026). It bundles Microsoft 365 Copilot AI capabilities, advanced security, compliance features, and the full Intune Suite — all of which were previously sold as separate add-ons to E5. Microsoft field teams are actively pushing E5 customers to E7 at renewal. Before accepting the upsell, run a structured capability audit: validate which E7-exclusive features you will genuinely activate and whether the $39/user/month premium over E5 is justified at your seat count.

E3 ($39/user/month from July 2026) includes desktop Office, Exchange 100GB, unlimited OneDrive, Intune Plan 1, Entra ID P1, and DLP. From July 2026 it also includes Intune Plan 2, Defender for Office P1, and Remote Help. E5 ($60/user/month from July 2026) adds advanced security (Defender for Endpoint P2, Defender for Identity), E5 Compliance, Power BI Pro, Phone System, and the full Intune Suite with EPM and Cloud PKI.

Microsoft 365 Copilot is priced at $30/user/month as a standalone add-on to E3 or E5. It is included in E7. Copilot integrates AI assistance into Word, Excel, PowerPoint, Teams, Outlook, and other M365 apps using the organisation's Microsoft Graph data as context.

Copilot Studio is Microsoft's platform for building custom AI agents and extending Copilot capabilities. Unlike M365 Copilot's per-user pricing, Copilot Studio uses per-session pricing based on the number of sessions your custom agents handle. Pricing varies by consumption level and should be modelled carefully before deployment at scale.

Azure Hybrid Benefit (AHB) allows organisations to apply qualifying on-premises Windows Server and SQL Server licences with active Software Assurance to Azure VMs at a reduced compute rate — typically saving 40–85% on Azure VM costs for those workloads. To qualify, the on-premises licence must be a current volume licence (not OEM or retail) with active SA coverage. Every organisation with significant on-premises SQL Server or Windows Server and Azure workloads should be running AHB — we regularly find organisations missing it.

Reserved Instances (RIs) commit to a specific VM type and region for 1 or 3 years in exchange for up to 72% discount vs pay-as-you-go. Azure Savings Plans commit a fixed hourly spend for 1 or 3 years and apply that discount across a broader range of compute types and regions (up to 65% discount). RIs deliver higher savings for stable, predictable workloads where you know the exact VM type. Savings Plans are better for mixed or evolving workloads where flexibility matters more than maximum discount.

Azure OpenAI offers two pricing models: Pay-as-you-go (billed per token consumed) and Provisioned Throughput Units (PTU), which pre-purchase dedicated model capacity at a fixed hourly rate. PTU is appropriate for production workloads requiring consistent latency and throughput guarantees. Pay-as-you-go suits development, testing, and variable-load scenarios. PTU pricing varies by model and region — benchmark your actual token consumption before committing to a PTU reservation.

Microsoft Fabric is Microsoft's unified analytics platform, combining Power BI, Azure Data Factory, Synapse Analytics, and other data services. Fabric uses capacity-based F SKU pricing — you purchase compute capacity (F2 to F2048) at a fixed monthly rate, and that capacity is shared across all Fabric workloads. Power BI Pro and Premium per-user licences are still available for Power BI workloads specifically, but Fabric F SKUs are the strategic direction for organisations running data engineering and analytics at scale.

Under an EA, Azure is typically covered by an Azure Monetary Commitment — a prepaid credit that is drawn down as you consume Azure services, usually at a negotiated discount. Under CSP, Azure is billed on actual consumption through your partner, with no prepayment. EA Azure commitments can be negotiated for discount and typically offer better commercial terms for large Azure spenders than CSP.

Dynamics 365 uses a qualifying user model: if a user accesses Dynamics 365 functionality — even indirectly through another application — they require a qualifying Dynamics 365 licence. The specific licence required depends on the type of access (full user, device, team member, or activity-based). From January 2026, Microsoft introduced automatic licence enforcement in Dynamics 365, removing the grey area that previously allowed borderline access patterns to go unlicensed. Review your user access mapping against the current qualifying user matrix.

Attach pricing allows users who already hold a qualifying Dynamics 365 base licence to add additional Dynamics 365 workloads at a reduced "attach" price rather than paying full price for each product. To qualify for attach pricing, the user must hold a minimum base licence — typically a Sales, Customer Service, or Finance and Operations full user licence. Attach licences cannot be purchased independently; they require the qualifying base licence.

Microsoft Purview is Microsoft's information governance, data protection, and compliance platform. The licensing boundary runs at the E3/E5 compliance boundary: E3 includes core DLP and basic sensitivity labelling; E5 Compliance (included in M365 E5) adds advanced eDiscovery, Insider Risk Management, Communication Compliance, and full Purview data governance capabilities. E7 includes the full E5 Compliance stack. If your compliance requirements extend beyond basic DLP, E5 Compliance or the dedicated Microsoft Purview add-on is required.

No. Teams calling (PSTN connectivity) requires Teams Phone, which is a separate add-on from the core M365 suite. Teams Phone System enables enterprise voice in Teams but does not include calling minutes — you also need a Calling Plan or Direct Routing setup for actual PSTN calls. Teams Phone is not included in any M365 SKU tier by default, though it is included in specific Microsoft 365 E5 voice bundles.

GitHub Copilot has three tiers. Individual is for personal use by individual developers. Business adds enterprise policy controls, VPN proxy support, and organisation-wide management. Enterprise adds GitHub Copilot Chat in the IDE with codebase-specific context, knowledge bases, and fine-tuning on your repositories. For enterprise development teams, the Business or Enterprise tier is appropriate — the Individual tier lacks the organisation controls required by most corporate security policies.

Microsoft now uses AI-based compliance scanning to identify organisations with likely deployment-to-entitlement gaps. Common triggers include: large-scale Dynamics 365 deployments, SQL Server virtualisation environments with high VM density, organisations that recently completed an M&A transaction and may not have reconciled licences, and customers approaching EA renewal who have significant over-deployments. Receiving a "SAM review" invitation is an early warning sign that Microsoft has flagged a potential compliance issue.

In a formal audit, licence shortfalls must be remedied at 125% of list price (not your EA discount rate). If non-compliance exceeds 5% of deployed licences, you also bear the full cost of the audit itself. Average audit findings in 2026 are $3.4 million. In a voluntary SAM review, shortfalls can typically be remedied at your contracted pricing — which is why distinguishing between a SAM review and a formal audit matters immediately when you receive a compliance communication.

The True-Up is a scheduled, contractual reconciliation event that happens annually under your EA — it is not an audit. You self-report additions and pay for them at your EA rate. A formal audit is a vendor-initiated compliance enforcement event where Microsoft (or a third-party auditor) examines your deployment data independently. The True-Up protects you from audit exposure for the products covered by your EA enrolment — it does not cover products outside EA scope.

Microsoft's fiscal year ends June 30. The Q4 window — April 1 to June 30 — is the highest-leverage period for buyers. Microsoft field reps have maximum incentive to close and discount during this window, as their quota attainment depends on it. EA renewals, new EA enrolments, and major add-on decisions that can be timed to land before June 30 consistently produce better commercial outcomes than deals signed in Q1 or Q2. If your renewal falls at any point in the year, explore whether an early renewal before June 30 can improve your terms.

The most effective levers are: (1) timing the renewal to Q4 (April–June); (2) demonstrating credible competitive alternatives — Azure vs AWS, Google Workspace vs M365; (3) committing to a multi-year Azure Monetary Commitment in exchange for deeper M365 discounts; (4) right-sizing your estate before renewal to negotiate from an accurate baseline rather than an inflated one; and (5) engaging independent Microsoft EA negotiation specialists who have current market benchmark data and are not commercially aligned with Microsoft.

SA costs approximately 25–29% of the underlying licence value per year. It is worth renewing if you are genuinely consuming the major benefits — primarily Azure Hybrid Benefit (which alone can save 40–85% on qualifying Azure VM costs) and upgrade rights. It is not worth renewing if your server estate is stable, you are not using Azure Hybrid Benefit, and you are not consuming Training Vouchers, Home Use Programme rights, or other SA benefits. A structured SA benefit utilisation review typically reveals that 40–60% of organisations are over-investing in SA relative to benefit consumption.

Licence mobility is an SA benefit that allows you to deploy qualifying server application licences (SQL Server, Exchange Server, SharePoint Server, and others) in shared environments — including authorised outsourcing partners' data centres and shared cloud infrastructure. Without licence mobility, server application licences must be deployed on dedicated hardware. If you use a managed service provider or co-location provider, licence mobility is typically required for compliance.

F1 and F3 are Frontline Worker licences designed for shift workers and deskless employees. F1 is web-only (no desktop Office apps), while F3 includes full desktop Office. Both F1 and F3 are significantly cheaper than E3. The E-series (E1, E3, E5, E7) is designed for information workers who need full productivity capabilities. Many organisations over-license frontline workers on E3 when F3 would suffice — auditing your user population by work pattern can identify significant right-sizing savings.

Intune Plan 1 ($8/user/month standalone) covers standard MDM/MAM for Windows, iOS, Android, macOS, and Linux. Plan 2 adds Endpoint Privilege Management (EPM), Tunnel for MAM (BYOD VPN), Advanced Analytics, and Specialty Device Management for HoloLens 2 and AR/VR. From July 2026, M365 E3 includes Plan 2 — so E3 customers paying for a separate Plan 2 add-on should cancel it at renewal.

Microsoft announced the following increases effective July 1, 2026: M365 E3 increases from $36 to $39/user/month; M365 E5 increases from $57 to $60/user/month. Business Basic increases to $7/month, Business Standard to $14/month. These increases reflect bundling of additional capabilities (Intune Plan 2, Defender for Office P1 added to E3) but represent a net price increase for customers who were already paying for those features separately and will now receive them without the add-on discount.

From November 2025, Microsoft eliminated volume-based pricing tiers (A through D) for online services under EA. All cloud subscriptions are now priced at Level A list price regardless of seat count. For large enterprises previously at Level D (the deepest discount tier), this represents an effective price increase of 8–15% on cloud product costs — one of the significant hidden cost drivers in the 2025–2026 licensing refresh cycle.

For organisations with EA renewals approaching in late 2026 or 2027, early renewal before June 30, 2026 can lock in pre-increase pricing and benefit from maximum Q4 field rep discount motivation. However, early renewal also locks you into a new 3-year term from the renewal date — which may not be appropriate if your business is planning significant structural changes. The calculation depends on your seat trajectory, planned product changes, and the specific discount Microsoft will offer for an early commitment. This is a decision that benefits from independent Microsoft licensing advisory.

E7 ($99/user/month, GA May 1 2026) is Microsoft's new top enterprise SKU above E5, bundling M365 Copilot AI, advanced security and compliance capabilities, and the full Intune Suite. Consider E7 if: you are already paying for M365 Copilot ($30/user/month) plus E5 Compliance add-ons plus the Intune Suite separately — the bundle may deliver cost consolidation. Do not accept E7 before calculating your actual all-in E5 cost stack including add-ons, as the premium is significant at scale.

Renewing the existing EA without challenging the baseline. Most EA renewals are structured as "roll forward the existing commitment plus True-Up additions" — which means the renewal starts from whatever mix of products, users, and pricing the current EA was set up with, without questioning whether that mix is still right. Conducting a right-sizing review before renewal — identifying over-licensed products, under-utilised SKUs, and add-ons now included in the base SKU — consistently produces savings of 12–22% against the baseline renewal price.

Not always — but for EA renewals above £2M annual spend, or for any organisation facing a Microsoft audit, the ROI on independent Microsoft licensing advisory is consistently positive. Microsoft's field teams are incentivised on revenue growth, not on optimising your licensing position. An independent advisor — particularly one with no commercial Microsoft partner relationship — brings current market benchmark data, negotiation experience across hundreds of comparable deals, and no conflict of interest in the outcome.

These 40 answers cover the most frequently asked questions from our client base. If your question is more specific — around a particular product, commercial scenario, audit situation, or negotiation challenge — our team of Microsoft EA negotiation specialists provides direct advisory support. We have answered tens of thousands of licensing questions across 500+ engagements and have not yet encountered one we couldn't help with. Get in touch to discuss your specific situation.