Microsoft 365 E5 vs E3: Is the $21/User Upgrade Actually Worth It?

Microsoft 365 E5 lists at $57/user/month; E3 at $36. That $21 gap, across a 1,000-user tenant, is $252,000 a year. E5 is genuinely excellent — the question is never "is E5 good?", it's "which of my users need what E5 adds?"

What E5 adds over E3

The E5 premium buys four things:

• Security — Defender for Office 365 P2, Defender for Endpoint P2, Defender for Identity, Entra ID P2 (PIM, risk-based Conditional Access, access reviews)
• Compliance — eDiscovery Premium, insider risk management, advanced records management
• Voice — Teams Phone with a domestic calling plan
• Analytics — Power BI Pro included

If a user genuinely consumes two or more of those pillars, E5 is fair value — buying Entra ID P2 + Defender P2 + Power BI Pro à la carte costs more than the uplift.

Where E5 waste comes from

In practice, E5 waste almost always traces to one decision: buying E5 uniformly for everyone because the security team needed the Defender suite for the org. Two patterns to look for:

1. The analytics that never happened

Power BI Pro is bundled, so "we'll use Power BI" justified the upgrade. Check the actual Power BI activity report. In tenants we've analysed it's common to find fewer than 15% of E5 users have opened Power BI in 90 days.

2. The phone system nobody ported

Teams Phone justified E5 for "future voice plans" that stayed future. If a user has no Teams Phone number assigned, that pillar is worth $0 to them.

The mixed-licensing answer

Microsoft sells the E5 pillars as standalone add-ons precisely so you can mix:

• E3 + E5 Security add-on (~$12/user/mo) — org-wide security posture without the compliance/voice/analytics you don't use
• E3 + Power BI Pro (~$14/user/mo combined uplift avoided for non-analysts)
• Keep full E5 for the 10–20% who demonstrably use PIM, eDiscovery, or Teams Phone

A 1,000-user org that moves 700 users from E5 to E3 + E5 Security saves roughly $75,000/year with no security regression.

How to find your downgrade candidates

Manually: export per-service usage reports (Power BI activity, Teams Phone assignment, eDiscovery case membership) and join against your E5 assignment list. It's tedious but doable — see our guide to finding unused licenses.

Automatically: SeatPrune flags every E5 user whose 90-day activity fits inside an E3 profile and shows the exact monthly saving per user, so the conversation with finance starts with a number, not a hunch.

Rule of thumb: if you can't name the E5 feature a user consumed last quarter, they're an E3 user with an expensive badge.