Included in
Derived from the service plans Microsoft provisions with each SKU — Microsoft publishes no product-in-bundle mapping.
Commercial
- Enterprise Mobility + Security E5
- Microsoft 365 E5 +10 variants
- Microsoft 365 E5 Compliance
- Microsoft 365 E5 Developer (without Windows and Audio Conferencing)
- Microsoft 365 E5 Security
- Microsoft 365 E7
- Microsoft 365 F5 Compliance Add-on
- Microsoft 365 F5 Security + Compliance Add-on
- Microsoft 365 F5 Security Add-on
- Microsoft 365 Security and Compliance for Firstline Workers
GCC
Education
What's included
Curated capability groupings first, then every remaining service plan Microsoft provisions with this SKU — together they're the complete list, nothing is hidden.
| Security |
|---|
| Defender for Cloud Apps Full Defender for Cloud Apps (all sanctioned SaaS) A cloud access security broker (CASB) that discovers shadow IT and applies access and session controls to third-party cloud apps. A cloud access security broker (CASB): discovers shadow IT, and applies session/access policies across sanctioned SaaS apps. The Office 365-scoped tier only covers Microsoft 365 activity; the full product extends that policy control to third-party cloud apps. |
| Other service plans |
| Exchange Foundation The baseline Exchange Online mailbox service included in most Microsoft 365 plans — hosted email, calendar, and contacts. |
Defender for Cloud Apps