I was recently asked what the differences are between:
- Microsoft 365 E3 + Microsoft 365 E5 Security
- Microsoft 365 E5
FEATURE MATRIX
Here’s a pre-configured Feature Matrix from M365Maps that shows the differences between E3+E5Sec vs E5:
LIST OF DIFFERENCES
For an outline of what all of these differences are, I’ve written them up for convenience sake:
- Compliance & Governance services
- Compliance Management
- Audit (Premium) – 1 year audit log retention, Premium-only Audit Events, High-bandwidth (2x) access to audit logs through O365 Mgmt APIs
- eDiscovery (Premium) – AI-accurate discovery & legal packaging
- Communications Compliance – Detection of regulatory compliance & business conduct violations
- Premium Compliance Manager Templates (3x ala carte) – Select 3 compliance templates from a catalog of 200+
- Data Lifecycle Management – Retain & delete broad groups of documents & data based on Enterprise policy
- Records Management – Provide specific retention & evidence of deletion on classified documents for compliance
- Message Encryption (Premium) – Restricting external recipient access to messages to meet compliance obligations
- Customer Key – Empowers own to submit & use their own encryption key for M365 services for compliance purposes
- Customer Lockbox – Ensures that Microsoft can’t access your content to do service operations without your explicit approval.
- Double Key Encryption – Uses two keys together to access select, protected content, one key held by Microsoft, the other key held by the instance owner. (Warning: Limits M365 functionality)
- Privileged Access Management for Office 365 – Allows granular access control over privileged admin tasks in Office 365 & protects against breaches that use admin accounts with standing access to sensitive data.
- Graph Access
- Built-in Graph Connector Quota Entitlement – 500 items/license of index quota, which counts towards ingesting content from Microsoft Graph connectors
- Built-in Graph Support for Teams DLP & Export – Real time API access to listen to Teams chats & export chats to 3rd party DLP solutions.
- Data Loss Prevention
- Teams Data Loss Prevention – Chat-based monitoring & prevention of the sharing of sensitive information
- Endpoint Data Loss Prevention – Prevents data from leaving laptops & desktops through USB or other means
- Information Barriers – Restrict communications between two groups (depts) on SharePoint, Teams, Exchange, etc.
- Insider Risk Management – Detect & prevent internal data leakage, security violations, IP theft, etc.
- Data Classification & Labelling
- Rules-based Classification (Online) – Automatically apply labels in Office 365 based on policies
- Rules-based Classification (On-prem) – Automatically apply labels in on-prem files & folders using a crawler
- Exact Data Match Classification – Detect exact or nearly exact data values to identify classified information
- AI-Trainable Classifiers – Identify classified content by training classifiers on 1000s of samples using machine learning
- Enterprise Data Analytics
- Power BI Pro – Provide reports & dashboards against any data source
- Cloud-based Digital Telephony
- Teams Phone – Cloud-based call control & PBX services through Microsoft Teams
-
Exclusive add-on: Calling Plans – Provides a primary phone number & calling minutes to make/receive calls.
- Exclusive add-on: Communications Credits – Provides usage if your org runs out of minutes & needs to continue to make calls or dial out from Audio Conferencing meetings.
- Exclusive add-on: Operator Connect – Provides PSTN connectivity with Teams Phone.
- Employee Performance Management
- Viva Insights (Premium) – Data-driven visibility into how work patterns affect wellbeing, productivity & business performance.
