Agent 365 Pricing: How Much You Really Need to Pay

Since Agent 365 became GA on May 2026, leadership stopped asking me what it does and started asking what it costs. Fair question, and the honest answer is uncomfortable.

Agent 365 is not a standalone price. It is a per-user add-on that requires a qualifying Microsoft 365 base license underneath it.

I spent this month pulling the model apart for our own customers. The cleanest way through it is by worker type, because what a person already holds decides what Agent 365 pricing actually adds on top.

Agent 365 in One Paragraph

Agent 365 is Microsoft's control plane for governing AI agents at enterprise scale. It gives every agent an identity through Entra Agent ID, lists them in a central Agent Registry, and applies security and data controls through Entra, Purview and Defender, the same tools you already run for your people.

If you want the full mechanics and the three integration routes, read that deep dive on Agent 365 as a control plane first.

For budgeting, one idea carries the whole article. Agent 365 is a layer, so its price is a layer price plus the license underneath it. I have watched budgets fall apart because someone read the 15 USD quote and forgot the stack it sits on.

What General Availability Covers, and What Is Still Preview

Agent 365 reached general availability on 1 May 2026, after starting in the Frontier early-access programme following its Ignite 2025 announcement. What you buy today is a shipping product, not a preview.

Most of the governance spine is live. Per-user governance, the Agent Registry, Entra Agent ID and the three integration routes all work in production, and more than 20 partners arrived pre-integrated at launch, including Adobe, NVIDIA, Celonis, Zendesk and n8n.

The deepest controls are still landing, and this matters for budgeting. As of this writing, full agent-user identities with their own mailbox and OneDrive remain in Frontier preview, and several Defender and Purview capabilities such as security posture and runtime protection sit in public preview. Agent security for Foundry and Copilot Studio moved under Agent 365 from 1 July 2026.

Agent 365 Is an Add-On, Not a Standalone License

Picture Agent 365 as, in essence, an add-on for governing your AI agents. Because it is an add-on, it does nothing on its own. You need a qualifying Microsoft 365 base license underneath before Agent 365 will run, and which base license depends on the worker, which I detail below.

It is licensed per user, not per agent. One license covers every agent that person owns, manages, sponsors or uses, and the agents carry no license of their own.

My rule for customers is simple. Only buy Agent 365 for the people who own and act as the primary manager of an agent. You count owners, not agents. A team of eight owning forty agents needs eight seats, not forty.

Take a custom agent brought in from LangChain. It gets an Entra Agent ID and a human owner, and that owner is who you license, not the colleagues who merely use it. So the paid seat count tracks the small group building and running agents, which is usually far smaller than leadership expects.

Which base license each of those owners needs comes down to what kind of worker they are. That is where the real money hides, so the rest is three cases.

SMB: Under 300 Seats 

Under 300 seats, your base is Microsoft 365 Business Premium. It already bundles the Defender and Purview security Agent 365 needs, so add Agent 365 at USD 15 per user per month for the people who own and govern agents. No new suite, no tier upgrade. 

One exception: frontline-heavy SMBs, retail, field service, can still buy F3 plus the F5 add-on under 300 seats, sometimes cheaper than Business Premium. Base the call on the roles you have, not the seat count. 

Enterprise: 300+ Seats 

Past 300 seats, Business Premium is off the table. The base license splits by worker type. 

Frontline and Deskless Workers 

Frontline staff, retail floor, factory line, healthcare wards, field service, work on a shared or mobile device, not a dedicated PC. Their base is Microsoft 365 F3 plus the F5 security and compliance add-on, not E5. 

Pushing a frontline agent owner onto E5 to "make Agent 365 work" is the most expensive mistake I see: enterprise-seat money for a shift lead. Most frontline workers only use agents, not own them, so the add-on count stays small. 

Knowledge Workers, and Why E7 Wins 

Knowledge workers, desk-based, full mailbox, Office and Teams all day, use E5 as the base. But E5 alone doesn't cover a good agent experience: it also needs Copilot and Entra Suite. 

Bought separately: 

• Microsoft 365 E5: USD 60 

• Microsoft 365 Copilot: USD 30 

• Entra Suite: USD 12 

• Agent 365: USD 15 

That's USD 117. Microsoft 365 E7 bundles all four for USD 99, about 15% less. Buy E7 if the person both uses and governs agents. Stay on E5 plus the add-on if they only govern and never touch Copilot. 

Which Agents Are Worth Governing With the Paid Tier

Not every agent needs the premium controls of Agent 365. You still have to decide which ones do, and that call should follow risk, not how many agents you happen to have.

Put an agent on the paid tier when it does any of the following:

• Reads sensitive or business-critical data
• Takes a business action, such as creating a record, moving money or acting inside a live system
• Is shared across multiple teams
• Runs in production

Leave it on the free foundational tier, with visibility only, when it:

• Only summarises public or low-sensitivity content
• Takes no action of its own
• Is a personal prototype or short-lived experiment

Do not govern every prototype at full depth which adds tons of cost and admin work. The two questions that settle most cases are data access and action scope. An agent high on either needs the paid controls, one low on both does not.

Decide that before you decide how deep to govern Copilot AI, and you can defend every premium seat instead of paying to govern everything.

Conclusion

The number that trips people up is never the 15 USD. It is the base license each owner already holds, the choice between E5-plus-add-on and E7, and which agents actually deserve the paid tier. 

Get those three right and Agent 365 becomes a defensible line in the budget instead of a guess, sized to the owners who need it and the agents that carry real risk.

Precio Fishbone works with organisations to move from AI and Microsoft strategy to structured, practical implementation. To discuss what this means for your environment

Frequently Asked Questions