Microsoft 365 E5 list price rises from $57 to approximately $60 per user per month on 1 July 2026 — a ~5% increase. The increase is bundled with new Security Copilot SCU allocation (400 SCU per 1,000 paid users monthly, max 10,000) and additional Intune Suite features (EPM, Enterprise Application Management, Cloud PKI). The bundling provides genuine offsetting value for organisations actively using Security Copilot and Intune Suite features — roughly $40–$70 per user annually in displaced add-on costs. For organisations not using these capabilities, the bundling is notional and the 5% net increase applies in full. Renewals signing before 1 July 2026 can lock in the $57 price for the term.
The numbers: list price, bundled value, and net
Microsoft 365 E5 has been priced at $57 per user per month for several years — one of the longest list-price stable runs in the M365 portfolio. The July 2026 adjustment moves the published list to approximately $60. The increase is modest in percentage terms (~5%) compared to the steeper percentages on Frontline and Business SKUs, but the absolute dollar impact per seat is the largest in the M365 portfolio because the base is the highest.
For a 5,000-seat enterprise on E5, the structural increase is $180,000 per year. Over a typical three-year EA term, the cumulative impact is approximately $540,000. The dollar impact justifies attention even though the percentage looks modest.
| Item | Pre-July 2026 | Post-July 2026 | Annual delta per 1,000 seats |
|---|---|---|---|
| E5 list price | $57.00 | ~$60.00 | +$36,000 |
| Security Copilot SCU allocation | None included | 400 SCU per 1,000 users (~$24,000 list value) | −$24,000 if actively used |
| Intune Suite features (EPM, EAM, Cloud PKI) | Separate purchase | Included | −$30,000–$60,000 if actively used |
| Net impact (active security buyer) | — | — | −$18,000 to +$12,000 (net negative or modest positive) |
| Net impact (no bundling use) | — | — | +$36,000 (full structural increase) |
Security Copilot SCU bundling: the value depends on actual use
Security Copilot is Microsoft’s AI security analyst product. It uses a consumption unit called SCU (Security Compute Units) measured per investigation or analyst workflow. The product is genuinely powerful for mature security operations centres and largely irrelevant for organisations without one. The bundling adds 400 SCU per 1,000 paid users per month, capped at 10,000 SCU total per tenant. Microsoft frames the bundling as a $24 per user annual value addition.
The framing is accurate only for organisations that are actually using Security Copilot. Three customer profiles illustrate the variance. Customer profile A — a 25,000-seat financial services firm with a mature SOC, currently using Security Copilot at scale, exceeding 10,000 SCU monthly: bundled value to this customer is at least $24/user/year, possibly more. Customer profile B — a 5,000-seat manufacturer with no current Security Copilot deployment: bundled value is notional, and the SCU allocation will go unused. Customer profile C — a 12,000-seat healthcare organisation evaluating Security Copilot: bundled value depends entirely on whether deployment proceeds.
The procurement implication: take credit for the bundling only when your organisation is actually using or deploying Security Copilot. Microsoft will frame the bundling as universal value; the procurement team should challenge the framing for non-users.
Intune Suite features: more universally valuable
The Intune Suite bundling additions to E5 are more broadly valuable than the Security Copilot allocation. EPM (Endpoint Privilege Management) allows controlled elevation of standard-user accounts to admin privileges for specific tasks — meaningful for organisations with mature endpoint security programmes. EAM (Enterprise Application Management) provides Microsoft-curated application metadata for app deployment. Cloud PKI provides cloud-managed certificate services replacing on-premises CA infrastructure.
For organisations currently purchasing Intune Suite separately ($10 per user per month) or specific add-ons (EPM at $3, Cloud PKI at $2), the bundling represents direct displacement of that spend. Most enterprise E5 customers either purchase or should purchase at least some of these capabilities, making the Intune bundling more universally value-positive than the Security Copilot allocation.
Should E5 customers downgrade in response?
The July 2026 changes create the opportunity to revisit E5-vs-E3 fit for parts of the user base. The structural answer depends on which E5 capabilities each user actually needs. Three user profiles drive the decision:
- Profile 1: Active E5 security feature users. Users in security, compliance, legal, IT, or roles with regular access to sensitive data who genuinely need the E5 security stack (Defender for Identity, Cloud App Security, Information Protection at scale, full Purview compliance). These users remain E5 candidates; the price increase is a cost of doing business.
- Profile 2: E5 for “just in case” reasons. Users on E5 because the organisation defaulted to E5 across the estate, but who do not actively use E5-specific capabilities. These users are downgrade candidates. The bundling additions to E3 narrow the gap further — Defender for Office 365 P1 (previously E5-only style protection) is now in E3 base.
- Profile 3: E5 for Power BI Pro reasons. Some organisations standardised on E5 specifically for Power BI Pro inclusion. These users may now make sense on E3 plus separate Power BI Pro, or on a Fabric capacity model that supports Power BI Premium for the viewer population without per-user licences.
Our 500+ engagement experience suggests 15–30% of typical enterprise E5 populations are Profile 2 or Profile 3 downgrade candidates. The July 2026 renewal is the right moment to make the change. See our M365 Optimisation service for the methodology that produces the user-level classification.
Lock-in tactics specific to E5
The E5 lock-in opportunity before 1 July 2026 is particularly valuable because the absolute dollar impact per seat is the highest in the portfolio. Three tactical considerations apply:
Acceleration math favours E5 heavily. For a 5,000-seat E5 customer, accelerating a renewal by 3–6 months to land before 1 July 2026 saves approximately $540K over the new term. The acceleration cost (compressed preparation, weaker negotiated discount on other levers) is typically 1–2% of EA value or roughly $50K–$100K. Net benefit: $400K–$490K. The math works clearly in favour of acceleration for E5-dominated customers.
Term length matters more. Because the absolute E5 dollar amount is large, the difference between a three-year and four-year term lock is material — an additional $180K of locked-in savings for the same 5,000-seat customer. Microsoft is currently willing to grant longer term commitments with price-lock for customers signing before the deadline; this option will narrow after July.
Watch the successor SKU clause. E5 may be partially superseded by E7 Frontier Suite over the term of the locked agreement. The contract needs to specify that the locked E5 pricing applies if the customer continues E5 through the term — not that any successor product (E7) is at prevailing pricing. See the E7 Frontier Suite guide for the SKU comparison.