Microsoft Agent 365 Hits General Availability — $15/User Control Plane Extends Entra, Purview and Defender to AI Agents (May 1, 2026)

Microsoft on May 1, 2026 moved Agent 365 from preview into general availability, pricing the new product at $15 per user per month as a standalone SKU and bundling it into the freshly launched Microsoft 365 E7 "Frontier Suite" at $99 per user per month. The product is positioned as a single control plane for AI agents — a place for IT and security to observe, govern, manage and secure every agent across an organization using the same identity, data and threat tools they already run for human users.

What Happened

Microsoft first announced Agent 365 at Ignite 2025 and trailed the GA date in Vasu Jakkal's March 9, 2026 Frontier Suite blog post. On May 1, 2026, Microsoft published the GA announcement on the Microsoft Security Blog, and the same day a separate Tech Community thread confirmed pricing, that no Microsoft 365 E7 license is required to use it standalone, and that the licensing applies per human user — agents themselves are not licensed.

Microsoft 365 E7, the new top-of-stack "Frontier Suite," stitches together M365 E5 (productivity and security), Microsoft Entra Suite (identity), Microsoft 365 Copilot ($30/user/month) and Agent 365 ($15/user/month) into a single $99 per-user-per-month bundle. M365 E5 itself moves from $57 to $60/user/month from July 2026, which means buying E7 instead of stacking the components separately is a small but real discount once Copilot is in the picture.

Key Details

• Pricing. $15 per human user per month standalone, or bundled into Microsoft 365 E7 at $99 per user per month alongside M365 E5, Entra Suite and Microsoft 365 Copilot.
• Scope. Day-one support for first-party Microsoft agents, agents built on the Microsoft 365 SDK, agents from Microsoft Copilot Studio, plus external agents running on Amazon Bedrock and Google's agent platforms.
• Local agent support. A new addition for GA — Agent 365 can now discover and govern local AI agents on user endpoints, with named support for the OpenClaw local-agent platform and the ability to block unsanctioned local agents at the network layer.
• Security stack reach. Agent 365 extends Microsoft Entra (identity, conditional access), Microsoft Purview (data governance, sensitivity labels, DLP) and Microsoft Defender (threat detection) so that AI agents inherit the same controls already enforced on human users.
• Cowork connection. The Wave 3 update to Microsoft 365 Copilot — announced alongside Agent 365 — introduces Copilot Cowork, a long-running multi-step agent surface built in collaboration with Anthropic and powered in part by Claude. Agent 365 is the governance layer for those Cowork agents in enterprise tenants.

What Developers and IT Are Saying

Reaction from enterprise IT has been cautiously optimistic. On the Microsoft Tech Community, the GA discussion thread crossed 300 comments within 24 hours, with admins praising the unified Entra + Purview + Defender story and a single per-human pricing model that does not punish heavy agent usage. The most upvoted comment in the "OBO Agents vs. Execute-as-User Agents" thread argues that Agent 365's distinction between on-behalf-of and execute-as-user identity is the missing primitive that will let security teams finally apply DLP to agent traffic in the same way they apply it to humans.

Skepticism is concentrated in three places. Several commenters note that the $15/user fee on top of Copilot's $30/user feels like a tax on enterprises that have already paid for E5. On Hacker News, the most discussed point is whether Microsoft's "control plane" pitch will hold up against Google and Amazon's competing agent governance stories — both of which integrate with Agent 365 today but could plausibly mature their own tooling. And on Reddit's r/sysadmin, the recurring complaint is that local agent discovery still requires Defender for Endpoint deployment everywhere, which is not yet universal in mid-market shops.

What This Means for Developers and IT

If your organization already runs Microsoft 365 E5 with Entra and Defender, adopting Agent 365 is largely a licensing decision and a policy authoring exercise — the underlying surface is the Entra and Purview admin centers you already use. For platform engineers building agents on the Microsoft 365 SDK or Copilot Studio, Agent 365 introduces a hard requirement to declare agent identity (OBO vs execute-as-user), data scopes, and tool permissions in a manifest that the control plane evaluates at runtime. Agents built outside the Microsoft ecosystem — on Amazon Bedrock or Google — can still be brought under Agent 365 governance, but only once the connector is configured and the agent's outbound traffic flows through Defender for Cloud Apps or Entra Internet Access.

For independent developers shipping agents into Microsoft tenants, the practical impact is that Agent 365 customers can now block unsanctioned agents at the network layer — including local agents running on managed endpoints. Developers should assume that in regulated industries, an agent that does not surface its identity to Entra and its data flows to Purview will simply be blocked.

What's Next

Microsoft has flagged a steady cadence of capability rollouts through the rest of 2026: deeper Copilot Cowork governance, expanded third-party agent platform connectors and additional Defender threat-detection signals tuned for agent traffic patterns. Microsoft 365 E7 is generally available now, and the standalone Agent 365 SKU is orderable through the standard commercial channels and CSP partners from May 1, 2026. A Microsoft Tech Community AMA on Agent 365 is scheduled for later in May.

Sources

• Microsoft Security Blog — Microsoft Agent 365, now generally available, expands capabilities and integrations — primary GA announcement
• The Official Microsoft Blog — Introducing the First Frontier Suite — original M365 E7 + Agent 365 framing
• Microsoft Tech Community — Agent 365 GA discussion thread — pricing and licensing clarifications
• Microsoft Learn — Microsoft Agent 365 overview — official capability documentation
• Thurrott — Agent 365 platform goes out of preview, adds local AI agent support — local agent and OpenClaw analysis
• VentureBeat — Microsoft says ungoverned AI agents could become corporate "double agents." Its fix costs $99 a month. — independent industry analysis