Agent 365 Pricing: How Much You Really Need to Pay

Since Agent 365 became GA on May 2026, leadership stopped asking me what it does and started asking what it costs. Fair question, and the honest answer is uncomfortable.

Agent 365 is not a standalone price. It is a per-user add-on that requires a qualifying Microsoft 365 base license underneath it.

I spent this month pulling the model apart for our own customers. The cleanest way through it is by worker type, because what a person already holds decides what Agent 365 pricing actually adds on top.

Agent 365 in One Paragraph

Agent 365 is Microsoft's control plane for governing AI agents at enterprise scale. It gives every agent an identity through Entra Agent ID, lists them in a central Agent Registry, and applies security and data controls through Entra, Purview and Defender, the same tools you already run for your people.

If you want the full mechanics and the three integration routes, read that deep dive on Agent 365 as a control plane first.

For budgeting, one idea carries the whole article. Agent 365 is a layer, so its price is a layer price plus the license underneath it. I have watched budgets fall apart because someone read the 15 USD quote and forgot the stack it sits on.

What General Availability Covers, and What Is Still Preview

Agent 365 reached general availability on 1 May 2026, after starting in the Frontier early-access programme following its Ignite 2025 announcement. What you buy today is a shipping product, not a preview.

Most of the governance spine is live. Per-user governance, the Agent Registry, Entra Agent ID and the three integration routes all work in production, and more than 20 partners arrived pre-integrated at launch, including Adobe, NVIDIA, Celonis, Zendesk and n8n.

The deepest controls are still landing, and this matters for budgeting. As of this writing, full agent-user identities with their own mailbox and OneDrive remain in Frontier preview, and several Defender and Purview capabilities such as security posture and runtime protection sit in public preview. Agent security for Foundry and Copilot Studio moved under Agent 365 from 1 July 2026.

Agent 365 Is an Add-On, Not a Standalone License

Picture Agent 365 as, in essence, an add-on for governing your AI agents. Because it is an add-on, it does nothing on its own. You need a qualifying Microsoft 365 base license underneath before Agent 365 will run, and which base license depends on the worker, which I detail below.

It is licensed per user, not per agent. One license covers every agent that person owns, manages, sponsors or uses, and the agents carry no license of their own.

My rule for customers is simple. Only buy Agent 365 for the people who own and act as the primary manager of an agent. You count owners, not agents. A team of eight owning forty agents needs eight seats, not forty.

Take a custom agent brought in from LangChain. It gets an Entra Agent ID and a human owner, and that owner is who you license, not the colleagues who merely use it. So the paid seat count tracks the small group building and running agents, which is usually far smaller than leadership expects.

Which base license each of those owners needs comes down to what kind of worker they are. That is where the real money hides, so the rest is three cases.

What Agent 365 Costs by Worker Type

Small and Medium Business Under 300 Seats

If you run under roughly 300 users, you are in SMB territory and the base is Microsoft 365 Business Premium, which is itself capped at 300 seats. Above that line it stops being an option.

Most SMBs already own Business Premium, and it already bundles the Defender and Purview security Agent 365 leans on. This is the one case where I would not overthink it. You hold the base already, so add Agent 365 at 15 USD per user per month for the handful of people who own and govern agents, and you are done. No new suite, no tier upgrade.

Frontline and Deskless Workers

Frontline workers are your deskless, shift-based staff. No dedicated PC, often a shared or mobile device, in roles like retail floor, factory line, healthcare wards, field service, warehousing and call centres.

Their base is not E5, and this is the most expensive mistake I see. A frontline worker qualifies through Microsoft 365 F5 with the Defender and Purview suites, not the full enterprise licence. Pushing a frontline agent owner up to E5 to "make Agent 365 work" is paying enterprise-seat money for a shift lead. Don't do it.

In practice, few frontline workers own agents. Most only use them, which their existing entitlement already covers. So the frontline add-on count is usually small, limited to the supervisors who actually sponsor an agent.

Enterprise Knowledge Workers, and Why E7 Wins

Knowledge workers are the desk-based office population. Full mailbox, a PC, Office and Teams all day. Finance, HR, developers, marketing. Their base is Microsoft 365 E5, so the entry math is E5 plus the 15 USD add-on.

But E5 only buys governance, it does not buy a good agent experience. To manage and use agents properly, an E5 seat still needs two more things: Microsoft 365 Copilot so the person can actually use agents, and Entra Suite for the deeper identity governance that applies to Entra Agent IDs.

Bought as separate line items, the full seat stacks up:

• Microsoft 365 E5 at USD 60
• Microsoft 365 Copilot at USD 30
• Entra Suite at USD 12
• Agent 365 at USD 15

That is about USD 117. Microsoft 365 E7 bundles the same four into one line at USD 99, roughly 15 percent less. So here is where I land: for a knowledge worker who both uses and governs agents, buy E7.

For a governance-only administrator who never touches a Copilot agent, stay on E5 plus the add-on and skip the Copilot licence they would not use. Buying E7 for that person is spending $30 a month on nothing.

Which Agents Are Worth Governing With the Paid Tier

Not every agent needs the premium controls of Agent 365. You still have to decide which ones do, and that call should follow risk, not how many agents you happen to have.

Put an agent on the paid tier when it does any of the following:

• Reads sensitive or business-critical data
• Takes a business action, such as creating a record, moving money or acting inside a live system
• Is shared across multiple teams
• Runs in production

Leave it on the free foundational tier, with visibility only, when it:

• Only summarises public or low-sensitivity content
• Takes no action of its own
• Is a personal prototype or short-lived experiment

Do not govern every prototype at full depth which adds tons of cost and admin work. The two questions that settle most cases are data access and action scope. An agent high on either needs the paid controls, one low on both does not.

Decide that before you decide how deep to govern Copilot AI, and you can defend every premium seat instead of paying to govern everything.

Conclusion

The number that trips people up is never the 15 USD. It is the base license each owner already holds, the choice between E5-plus-add-on and E7, and which agents actually deserve the paid tier. 

Get those three right and Agent 365 becomes a defensible line in the budget instead of a guess, sized to the owners who need it and the agents that carry real risk.

Precio Fishbone works with organisations to move from AI and Microsoft strategy to structured, practical implementation. To discuss what this means for your environment, contact our team.

Frequently Asked Questions