Upgrade scope

What a step up actually buys, scoped live with the customer

Microsoft 365 licensing

E5 to E7 scope

Customer not set

24 October 2026

Summary

The step moves network access into the identity engine, completes identity governance, and gives AI agents an identity, an owner, a permission scope and an audit trail. Microsoft 365 Copilot is bundled as part of the same licence.

In scope9

Later horizon3

Not relevant1

Tools in use today0

Themes in scope: Network access, Identity & access, Agent governance, Data protection, AI productivity

Network access

Capability	Position	Outcome	Delivered by	Note
Private access, VPN replacement	In scopeHigh effort	Remote access stops granting network level reach. The identity becomes the perimeter.	Entra Private Access, per application access without a network tunnel
Internet access and web filtering	In scopeMedium effort	Secure web gateway policy moves into the same engine as Conditional Access.	Entra Internet Access, web content filtering, tenant restrictions

Identity & access

Capability	Position	Outcome	Delivered by
Joiner, mover, leaver automation	In scopeHigh effort	Onboarding and offboarding are driven from the HR record, with no orphaned access.	Entra ID Governance in full, including Lifecycle Workflows
Identity proofing	Later horizonMedium effort	Helpdesk resets and contractor onboarding are verified cryptographically, not by voice.	Entra Verified ID, verifiable credentials, Face Check
Identity posture management	Later horizonLow effort	Identity configuration drift is reported rather than discovered during an incident.	Entra Suite posture recommendations and hardening signal

Agent governance

Capability	Position	Outcome	Delivered by
Agent identity	In scopeMedium effort	An agent stops inheriting a human token and becomes something access governance can see.	Entra Agent ID, a directory identity, owner and scoped permission per agent
Agent registry and observability	In scopeMedium effort	There is one authoritative answer to how many agents exist and what they did.	Agent 365 control plane, inventory, activity, consumption, suspend and retire
Agent security and data controls	In scopeMedium effort	Agent activity lands in the same incident queue and the same retention scope as people.	Defender detections and Purview DLP, labelling and retention applied to agents
Agent lifecycle and review	In scopeMedium effort	Unowned and unused agents are removed instead of accumulating quietly.	Access reviews, ownership attestation and decommissioning for agent identities

Data protection

Capability	Position	Outcome	Delivered by	Note
Data security posture for AI	In scopeMedium effort	Prompt and grounding exposure is measured, so oversharing is fixed before it is amplified.	Purview DSPM for AI across Copilot and agent interactions
SharePoint Advanced Management	In scopeMedium effort	Permission sprawl is found and contained. This is a precondition, not a bonus.	Oversharing reports, restricted access control, site lifecycle policy

AI productivity

Capability	Position	Outcome	Delivered by	Note
Microsoft 365 Copilot in app	Later horizonMedium effort	The visible user benefit. Real, but the least differentiated part of the step up.	Copilot in Word, Excel, PowerPoint, Outlook and Teams, grounded on tenant data

Tooling this step can displace

No incumbent tooling was marked as in use.

Watch out

Scope this step against VPN, web gateway and identity governance renewal dates, and against whether agents are being introduced. E7 excludes Security Copilot and the Intune Suite, which remain separately billed.

Step

Customer

E5→E7

Identity becomes the perimeter, and agents become governed identities

9
In: 3
Later: 1
Out: 0
Tools

Themes

Identity & access

3 capabilities

Joiner, mover, leaver automationHigh effortSuggested
Onboarding and offboarding are driven from the HR record, with no orphaned access.
Delivered by
Entra ID Governance in full, including Lifecycle Workflows
Relevant when
Manual offboarding, or a standalone identity governance product.
Identity proofingMedium effort
Helpdesk resets and contractor onboarding are verified cryptographically, not by voice.
Delivered by
Entra Verified ID, verifiable credentials, Face Check
Relevant when
Helpdesk social engineering exposure or heavy contractor onboarding.
Identity posture managementLow effort
Identity configuration drift is reported rather than discovered during an incident.
Delivered by
Entra Suite posture recommendations and hardening signal
Relevant when
Multiple administrators changing identity policy over time.

Network access

2 capabilities

Private access, VPN replacementHigh effortSuggested
Remote access stops granting network level reach. The identity becomes the perimeter.
Delivered by
Entra Private Access, per application access without a network tunnel
Relevant when
VPN concentrators or remote access appliances approaching renewal.
Internet access and web filteringMedium effortSuggested
Secure web gateway policy moves into the same engine as Conditional Access.
Delivered by
Entra Internet Access, web content filtering, tenant restrictions
Relevant when
A standalone proxy or secure web gateway subscription.

Data protection

2 capabilities

Data security posture for AIMedium effortSuggested
Prompt and grounding exposure is measured, so oversharing is fixed before it is amplified.
Delivered by
Purview DSPM for AI across Copilot and agent interactions
Relevant when
Any AI rollout beyond a pilot cohort.
SharePoint Advanced ManagementMedium effortSuggested
Permission sprawl is found and contained. This is a precondition, not a bonus.
Delivered by
Oversharing reports, restricted access control, site lifecycle policy
Relevant when
Long lived SharePoint estate with broken inheritance.

Agent governance

4 capabilities

Agent identityMedium effortSuggested
An agent stops inheriting a human token and becomes something access governance can see.
Delivered by
Entra Agent ID, a directory identity, owner and scoped permission per agent
Relevant when
Any agent already running, including ones built outside IT.
Agent registry and observabilityMedium effortSuggested
There is one authoritative answer to how many agents exist and what they did.
Delivered by
Agent 365 control plane, inventory, activity, consumption, suspend and retire
Relevant when
No current inventory of agents or automation identities.
Agent security and data controlsMedium effortSuggested
Agent activity lands in the same incident queue and the same retention scope as people.
Delivered by
Defender detections and Purview DLP, labelling and retention applied to agents
Relevant when
Agents touching sensitive or regulated content.
Agent lifecycle and reviewMedium effortSuggested
Unowned and unused agents are removed instead of accumulating quietly.
Delivered by
Access reviews, ownership attestation and decommissioning for agent identities
Relevant when
Any intent to allow business built agents.

AI productivity

2 capabilities

Microsoft 365 Copilot in appMedium effort
The visible user benefit. Real, but the least differentiated part of the step up.
Delivered by
Copilot in Word, Excel, PowerPoint, Outlook and Teams, grounded on tenant data
Relevant when
Existing or planned Copilot add on spend.
Copilot Studio capacityMedium effort
Business process agents can be built without a separate consumption negotiation.
Delivered by
Agent building capacity through the Copilot entitlement
Relevant when
A backlog of process automation candidates.

Tooling this step can displace

Tick what the customer pays for today, then tie each one to a contract and a renewal date.

Identity governance and access request toolingFull ID Governance with Lifecycle Workflows driving joiner mover leaver from HR attributes. Residual: Entitlements held only in line of business systems need connectors either way.
Identity proofing or onboarding verification serviceVerified ID with Face Check, issued and consumed inside the tenant.
Remote access VPN estateGlobal Secure Access Private Access, per application rather than per network. Residual: Non TCP protocols and appliance management planes usually justify keeping one small VPN path.
Secure web gateway or proxy filteringGlobal Secure Access Internet Access with policy in the same engine as Conditional Access. Residual: Unmanaged and guest networks still need a local egress control.
Standalone zero trust network access productPrivate Access, sharing Conditional Access policy and device signal.
Standalone Microsoft 365 Copilot add-onIncluded in the suite, so existing add-on spend is absorbed.
Spreadsheet inventory of bots, scripts and automationsAgent 365 registry with identity, ownership, observability and lifecycle control. Residual: Automations outside Microsoft 365 need to be onboarded before the registry is true.

Watch out