{"count":55,"entries":[{"abbreviations":["MDE"],"aliases":["mdatp","defender-endpoint","microsoft-defender-for-endpoint"],"domain":"security","has_take":true,"included_in":[{"note":"Plan 1 — next-gen protection, ASR, manual response (full EDR is Plan 2 in E5)","slug":"m365-e3"},{"note":"Plan 2 — full EDR, threat hunting, automated investigation","slug":"m365-e5"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/defender-endpoint/","name":"Microsoft Defender for Endpoint","official":"An enterprise endpoint security platform for preventing, detecting, investigating, and responding to advanced threats on Windows, macOS, Linux, iOS, and Android.","old_names":["Windows Defender ATP","Microsoft Defender ATP"],"plain_english":"The endpoint security layer that watches for malicious behaviour on company devices and lets admins investigate, isolate, or remediate from one console.","plans":["Plan 1 — next-gen protection + ASR + manual response actions, central management (E3, Business Premium uses Defender for Business)","Plan 2 — full EDR, advanced hunting, automated investigation and response, threat \u0026 vulnerability depth (E5, M365 A5/G5)"],"portal_url":"https://security.microsoft.com/","related_certs":["sc-200","ms-500"],"related_tools":["copilot-feature-matrix"],"slug":"mde","status":"ga","synonyms":["antivirus","av","edr","endpoint security","anti-malware","microsoft antivirus"],"url":"/mde/","voice":{"mascot":"🛡️ Office CCTV","sush_take":"If you've got E5 and you're not turning Plan 2 on, you're paying for a Ferrari and driving it in first gear.","sush_take_status":"spicy"},"watch":""},{"abbreviations":["PIM"],"aliases":["privileged-identity-management","pim-roles"],"domain":"identity","has_take":false,"included_in":[{"note":"via Entra ID P2","slug":"m365-e5"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure","name":"Privileged Identity Management","official":"A Microsoft Entra ID feature that enables you to manage, control, and monitor access to important resources by providing time-based and approval-based role activation.","old_names":[],"plain_english":"Time-boxed activation of admin roles with approval and MFA gates, so high-privilege roles are 'eligible' by default and only 'active' when needed.","plans":["Requires Microsoft Entra ID P2 or Microsoft Entra ID Governance"],"portal_url":"https://entra.microsoft.com/#view/Microsoft_Azure_PIMCommon/CommonMenuBlade","related_certs":["sc-300","ms-500"],"related_tools":[],"slug":"pim","status":"ga","synonyms":["jit","just-in-time access","role activation","privileged access management","elevated access"],"url":"/pim/","voice":{"mascot":"🔑 Key cabinet with a timer","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["E3"],"aliases":["microsoft-365-e3","m365e3"],"domain":"productivity","has_take":false,"included_in":[],"includes":[{"note":"100 GB mailbox","slug":"exchange-online"},{"note":"","slug":"teams"},{"note":"","slug":"sharepoint"},{"note":"","slug":"onedrive"},{"note":"Conditional Access, MFA, SSO","slug":"entra-p1"},{"note":"via Entra ID P1","slug":"mfa"},{"note":"via Entra ID P1","slug":"conditional-access"},{"note":"Plan 1 — next-gen protection, ASR, manual response (full EDR is Plan 2 in E5)","slug":"mde"},{"note":"Plan 1","slug":"intune"},{"note":"","slug":"autopilot"},{"note":"via Windows 11 Enterprise E3","slug":"bitlocker"},{"note":"email hygiene baseline; Defender for Office 365 is a separate add-on","slug":"eop"},{"note":"via Intune","slug":"compliance-policies"}],"includes_source":"https://www.aguidetocloud.com/licensing/microsoft-365-e3/","kind":"license","last_verified":"2026-05-04","learn_url":"https://www.microsoft.com/en-us/microsoft-365/enterprise/e3","name":"Microsoft 365 E3","official":"Microsoft 365 E3 combines the productivity apps and services in Office 365 E3 with Windows 11 Enterprise, Enterprise Mobility + Security E3, and Intune.","old_names":[],"plain_english":"The mainstream enterprise plan — Office apps + Windows + a baseline set of Entra, Intune, and Defender capabilities. Good for most enterprises; jumps to E5 for advanced security.","plans":["List price: USD $36/user/month (current). Increases to USD $39/user/month effective 1 July 2026."],"portal_url":"","related_certs":["ms-900","ms-100"],"related_tools":["licence-picker","copilot-feature-matrix"],"slug":"m365-e3","status":"ga","synonyms":[],"url":"/m365-e3/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":"List price rises from USD $36 → $39/user/month on 1 July 2026"},{"abbreviations":[],"aliases":["microsoft-intune","endpoint-manager","mem"],"domain":"endpoint","has_take":false,"included_in":[{"note":"Plan 1","slug":"m365-e3"},{"note":"Plan 1","slug":"m365-e5"},{"note":"Plan 1","slug":"m365-f3"},{"note":"Plan 1","slug":"m365-business-premium"},{"note":"Plan 1","slug":"ems"}],"includes":[],"includes_source":"","kind":"portal","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/mem/intune/","name":"Microsoft Intune","official":"A cloud-based endpoint management solution that simplifies app and device management across many devices, including mobile devices, desktop computers, and virtual endpoints.","old_names":["Microsoft Endpoint Manager"],"plain_english":"Microsoft's cloud service for managing devices and apps — push policies, deploy software, enforce compliance, wipe lost devices, and protect company data on personal devices.","plans":["Included in M365 E3/E5/F1/F3, M365 Business Premium, and standalone Intune Plan 1","Intune Plan 2 + Intune Suite add advanced features (Endpoint Privilege Management, Remote Help, Advanced Analytics, etc.)"],"portal_url":"https://intune.microsoft.com/","related_certs":["md-102","ms-100"],"related_tools":["compliance-passport"],"slug":"intune","status":"ga","synonyms":["mdm","mam","mobile device management","mobile application management","device management"],"url":"/intune/","voice":{"mascot":"📱 Mobile remote control","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["foundry","ai-foundry","microsoft-foundry"],"domain":"ai","has_take":true,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/azure/ai-foundry/","name":"Azure AI Foundry","official":"An integrated platform for designing, customizing, and managing AI applications and agents. Includes a multi-vendor model catalog, agent service, evaluation tools, and content safety.","old_names":["Azure AI Studio","Azure Machine Learning Studio (legacy)"],"plain_english":"Microsoft's unified AI development platform — pick from a multi-vendor model catalog (OpenAI, Anthropic, Meta, Mistral, Hugging Face, custom) and build, evaluate, and deploy AI applications in one place.","plans":["Pay-as-you-go for inference, fine-tuning, and storage. No platform fee."],"portal_url":"https://ai.azure.com/","related_certs":["ai-102"],"related_tools":["copilot-frontier-map"],"slug":"azure-ai-foundry","status":"ga","synonyms":[],"url":"/azure-ai-foundry/","voice":{"mascot":"","sush_take":"The headline isn't 'Microsoft has a model' — it's the multi-vendor catalog. That's the actual differentiation.","sush_take_status":"spicy"},"watch":"Model catalog expands roughly monthly — recent additions include Anthropic Claude Sonnet, OpenAI GPT-5, Mistral Large"},{"abbreviations":["CA"],"aliases":["entra-ca","ca-policy","conditional-access-policies"],"domain":"identity","has_take":false,"included_in":[{"note":"via Entra ID P1","slug":"m365-e3"},{"note":"via Entra ID P1","slug":"m365-e5"},{"note":"via Entra ID P1","slug":"m365-f3"},{"note":"via Entra ID P1","slug":"m365-business-premium"},{"note":"via Entra ID P1","slug":"ems"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/identity/conditional-access/","name":"Conditional Access","official":"An Microsoft Entra ID feature that brings together signals (user, location, device, application, risk) into policy decisions to allow, block, or require additional controls (MFA, compliant device) for access.","old_names":[],"plain_english":"Policy-driven access gates that decide who can sign in, from where, on what device, and under what conditions — applied dynamically based on signals like risk, location, and device health.","plans":["Microsoft Entra ID P1 (included in M365 E3, F3, Business Premium)","Risk-based CA requires Entra ID P2"],"portal_url":"https://entra.microsoft.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade","related_certs":["sc-300","ms-500"],"related_tools":["ca-builder"],"slug":"conditional-access","status":"ga","synonyms":["access policy","zero trust access","location-based access","risk-based access"],"url":"/conditional-access/","voice":{"mascot":"🚦 Identity traffic light","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["MFA"],"aliases":["multi-factor-auth","two-factor","2fa"],"domain":"identity","has_take":false,"included_in":[{"note":"via Entra ID P1","slug":"m365-e3"},{"note":"via Entra ID P1","slug":"m365-e5"},{"note":"via Entra ID P1","slug":"m365-f3"},{"note":"via Entra ID P1","slug":"m365-business-premium"},{"note":"via Entra ID P1","slug":"ems"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks","name":"Multi-factor Authentication","official":"An identity verification method that requires more than one form of evidence to prove identity, typically combining something you know (password) with something you have (phone, key) or something you are (biometric).","old_names":[],"plain_english":"Sign-in that requires more than just a password — a second factor like a phone notification, authenticator app code, or hardware key — so a stolen password alone can't get in.","plans":["Free baseline (Security Defaults or per-user MFA)","Granular control via Conditional Access (Entra ID P1+)"],"portal_url":"https://entra.microsoft.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade","related_certs":["sc-300","ms-900"],"related_tools":[],"slug":"mfa","status":"ga","synonyms":["two-step verification","two-step","multifactor","second factor","authenticator"],"url":"/mfa/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["SSPR"],"aliases":["self-service-password-reset","password-reset"],"domain":"identity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-howitworks","name":"Self-Service Password Reset","official":"An Microsoft Entra ID capability that allows users to reset their cloud passwords using pre-registered authentication methods. Combined with password writeback for hybrid environments.","old_names":[],"plain_english":"Lets users reset their own passwords via verified phone, email, or authenticator app — without calling the helpdesk. Optionally writes the new password back to on-prem AD.","plans":["Self-service for cloud accounts: Entra ID P1 or M365 Business Premium","Hybrid writeback to AD: same"],"portal_url":"https://entra.microsoft.com/#view/Microsoft_AAD_IAM/PasswordResetMenuBlade","related_certs":["sc-300"],"related_tools":[],"slug":"sspr","status":"ga","synonyms":["forgot password","reset password","password writeback"],"url":"/sspr/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["entra-id-p1","aad-p1","azure-ad-p1"],"domain":"identity","has_take":true,"included_in":[{"note":"Conditional Access, MFA, SSO","slug":"m365-e3"},{"note":"P1 baseline (CA/MFA/SSO)","slug":"m365-e5"},{"note":"Conditional Access, MFA, SSO","slug":"m365-f3"},{"note":"Conditional Access, MFA, SSO","slug":"m365-business-premium"},{"note":"EMS E3 baseline (CA/MFA/SSO)","slug":"ems"}],"includes":[],"includes_source":"","kind":"license","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/fundamentals/licensing","name":"Microsoft Entra ID P1","official":"A premium tier of Microsoft Entra ID providing advanced identity and access management features for enterprise environments.","old_names":["Azure AD Premium P1"],"plain_english":"The mainstream identity license — adds Conditional Access, group-based licensing, password writeback, dynamic groups, and MFA-via-CA on top of the free Entra tier.","plans":["Standalone: USD /user/month","Included in: M365 E3, M365 F3, M365 Business Premium, EMS E3"],"portal_url":"","related_certs":["sc-300"],"related_tools":["licence-picker"],"slug":"entra-p1","status":"ga","synonyms":["sso","saml","single sign-on","conditional access licence","identity p1"],"url":"/entra-p1/","voice":{"mascot":"","sush_take":"Without P1, you don't really have Conditional Access. It's the line between cloud SSO and cloud security.","sush_take_status":"spicy"},"watch":""},{"abbreviations":[],"aliases":["entra-id-p2","aad-p2","azure-ad-p2"],"domain":"identity","has_take":false,"included_in":[{"note":"PIM, risk-based access, identity protection","slug":"m365-e5"},{"note":"EMS E5 only — PIM, risk-based access, identity protection","slug":"ems"}],"includes":[],"includes_source":"","kind":"license","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/fundamentals/licensing","name":"Microsoft Entra ID P2","official":"Adds advanced identity protection and governance capabilities on top of P1, including risk-based Conditional Access, Privileged Identity Management, and Access Reviews.","old_names":["Azure AD Premium P2"],"plain_english":"P1 plus the risk-based identity tools — Identity Protection, PIM, Access Reviews. The license you need if you take the principle of least privilege seriously.","plans":["Standalone: USD /user/month","Included in: M365 E5, EMS E5"],"portal_url":"","related_certs":["sc-300"],"related_tools":["licence-picker"],"slug":"entra-p2","status":"ga","synonyms":["identity governance","pim licence","identity protection licence","identity p2"],"url":"/entra-p2/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["MDCA","MDA"],"aliases":["defender-cloud-apps","defender-for-cloud-apps"],"domain":"security","has_take":false,"included_in":[{"note":"CASB, shadow IT discovery, SaaS app control","slug":"m365-e5"},{"note":"EMS E5 only — CASB","slug":"ems"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/defender-cloud-apps/","name":"Microsoft Defender for Cloud Apps","official":"A Cloud Access Security Broker (CASB) that supports various deployment modes including log collection, API connectors, and reverse proxy. Provides rich visibility, control over data travel, and analytics for cyberthreat identification.","old_names":["Microsoft Cloud App Security","MCAS"],"plain_english":"The Cloud Access Security Broker (CASB) — discovers shadow IT, controls how data flows into and out of SaaS apps, and applies policies on third-party clouds your users actually use.","plans":["Standalone (a la carte)","Included in: M365 E5, M365 E5 Security, EMS E5"],"portal_url":"https://security.microsoft.com/cloudapps/","related_certs":["sc-200"],"related_tools":[],"slug":"mdca","status":"ga","synonyms":["casb","shadow it","saas security","cloud app security","discovery"],"url":"/mdca/","voice":{"mascot":"🛒 The shadow-IT detective","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["MDO"],"aliases":["defender-office-365","defender-for-office","atp"],"domain":"security","has_take":false,"included_in":[{"note":"Plan 2 — attack simulation, auto-remediation, threat trackers","slug":"m365-e5"},{"note":"Plan 1 only — Safe Links, Safe Attachments","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/defender-office-365/","name":"Microsoft Defender for Office 365","official":"Safeguards organizations against malicious threats posed by email messages, links (URLs), and collaboration tools (Teams, SharePoint, OneDrive). Extends Exchange Online Protection.","old_names":["Office 365 ATP","Office 365 Advanced Threat Protection"],"plain_english":"The email and collaboration security layer — Safe Links, Safe Attachments, anti-phishing with impersonation protection, attack simulation training. Sits on top of EOP.","plans":["Plan 1 — Safe Links + Safe Attachments + anti-phishing (M365 Business Premium, included in some E3 paths)","Plan 2 — adds Threat Explorer, Attack Simulation Training, Automated Investigation (M365 E5)"],"portal_url":"https://security.microsoft.com/","related_certs":["sc-200"],"related_tools":[],"slug":"mdo","status":"ga","synonyms":["email security","anti-phishing","safe links","safe attachments","phishing protection"],"url":"/mdo/","voice":{"mascot":"📧 The email bouncer","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["MDI"],"aliases":["defender-identity","defender-for-identity"],"domain":"security","has_take":false,"included_in":[{"note":"credential theft + lateral movement detection","slug":"m365-e5"},{"note":"EMS E5 only — Defender for Identity (originally part of EMS suite)","slug":"ems"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/defender-for-identity/","name":"Microsoft Defender for Identity","official":"A cloud-based security solution that leverages on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions.","old_names":["Azure ATP","Azure Advanced Threat Protection"],"plain_english":"Watches your on-prem Active Directory and Entra ID for identity-based attacks — pass-the-hash, golden ticket, reconnaissance, lateral movement. Sensor on each domain controller.","plans":["Standalone","Included in: M365 E5, M365 E5 Security, EMS E5"],"portal_url":"https://security.microsoft.com/","related_certs":["sc-200"],"related_tools":[],"slug":"mdi","status":"ga","synonyms":["identity threat detection","ad attack detection","lateral movement detection"],"url":"/mdi/","voice":{"mascot":"🕵️ Identity attack canary","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["EOP"],"aliases":["exchange-online-protection"],"domain":"security","has_take":false,"included_in":[{"note":"email hygiene baseline; Defender for Office 365 is a separate add-on","slug":"m365-e3"},{"note":"","slug":"m365-e5"},{"note":"","slug":"m365-f3"},{"note":"","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/defender-office-365/eop-about","name":"Exchange Online Protection","official":"A cloud-based filtering service that helps protect organizations against spam, malware, and other email threats. EOP is included with any Microsoft 365 plan that includes Exchange Online mailboxes.","old_names":[],"plain_english":"The baseline email security layer in every Exchange Online plan — anti-spam, anti-malware, basic phishing filtering, and zero-hour auto-purge (ZAP) for email already delivered.","plans":["Included in every Exchange Online plan","Standalone EOP available for hybrid/non-EXO deployments"],"portal_url":"https://security.microsoft.com/","related_certs":["sc-200","ms-203"],"related_tools":[],"slug":"eop","status":"ga","synonyms":["anti-spam","spam filter","mail filter","exchange protection","zap"],"url":"/eop/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["windows-autopilot"],"domain":"endpoint","has_take":false,"included_in":[{"note":"","slug":"m365-e3"},{"note":"","slug":"m365-e5"},{"note":"","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/autopilot/","name":"Windows Autopilot","official":"A collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. It can also be used to reset, repurpose, and recover devices.","old_names":[],"plain_english":"Zero-touch device provisioning — out-of-box Windows hardware enrolls itself in Intune, gets your apps, configs, and policies, and lands the user at their desktop. No imaging.","plans":["Requires Intune Plan 1 (M365 E3/E5/F3, Business Premium, EMS E3+)"],"portal_url":"https://intune.microsoft.com/","related_certs":["md-102"],"related_tools":[],"slug":"autopilot","status":"ga","synonyms":["zero touch","oobe","device provisioning","out of box","windows provisioning"],"url":"/autopilot/","voice":{"mascot":"📦 Out-of-the-box → at-the-desk","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["LAPS"],"aliases":["windows-laps","local-admin-password-solution","entra-laps"],"domain":"endpoint","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview","name":"Windows LAPS","official":"An automated solution that randomizes and rotates local administrator account passwords on Windows devices and stores them securely in Active Directory or Microsoft Entra ID, providing a way to recover credentials when needed.","old_names":["Microsoft LAPS (legacy)"],"plain_english":"Automatically rotates the local admin password on every domain-joined / Entra-joined Windows device — different password per machine, stored securely in AD or Entra.","plans":["Built into Windows (no license required)","Entra-joined LAPS requires Entra ID P1+"],"portal_url":"https://entra.microsoft.com/#view/Microsoft_AAD_DevicesMenuBlade/Devices/menuId/Devices","related_certs":["md-102","sc-300"],"related_tools":[],"slug":"laps","status":"ga","synonyms":["local admin password","admin password rotation","lapsv2"],"url":"/laps/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["intune-compliance","compliance"],"domain":"endpoint","has_take":false,"included_in":[{"note":"via Intune","slug":"m365-e3"},{"note":"via Intune","slug":"m365-e5"},{"note":"via Intune","slug":"m365-business-premium"},{"note":"via Intune","slug":"ems"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started","name":"Intune Compliance Policies","official":"Rules and settings that devices must meet to be considered compliant. Compliance policies are paired with Conditional Access to control access to corporate resources.","old_names":[],"plain_english":"Rules that say what makes a device 'compliant' — encryption on, screen lock set, OS patched, no jailbreak. Conditional Access uses this signal to allow or block access.","plans":["Requires Intune Plan 1"],"portal_url":"https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMenu/~/compliance","related_certs":["md-102"],"related_tools":["ca-builder","compliance-passport"],"slug":"compliance-policies","status":"ga","synonyms":["device compliance","endpoint compliance","compliance rules"],"url":"/compliance-policies/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["microsoft-365-e5","m365e5"],"domain":"productivity","has_take":false,"included_in":[],"includes":[{"note":"100 GB mailbox","slug":"exchange-online"},{"note":"+ Phone System + Audio Conferencing","slug":"teams"},{"note":"","slug":"sharepoint"},{"note":"","slug":"onedrive"},{"note":"P1 baseline (CA/MFA/SSO)","slug":"entra-p1"},{"note":"PIM, risk-based access, identity protection","slug":"entra-p2"},{"note":"via Entra ID P1","slug":"mfa"},{"note":"via Entra ID P1","slug":"conditional-access"},{"note":"Plan 2 — full EDR, threat hunting, automated investigation","slug":"mde"},{"note":"Plan 2 — attack simulation, auto-remediation, threat trackers","slug":"mdo"},{"note":"credential theft + lateral movement detection","slug":"mdi"},{"note":"CASB, shadow IT discovery, SaaS app control","slug":"mdca"},{"note":"Plan 1","slug":"intune"},{"note":"","slug":"autopilot"},{"note":"via Windows 11 Enterprise E5","slug":"bitlocker"},{"note":"","slug":"eop"},{"note":"via Intune","slug":"compliance-policies"},{"note":"via Entra ID P2","slug":"pim"},{"note":"advanced compliance — Insider Risk, eDiscovery Premium, Audit Premium","slug":"purview"}],"includes_source":"https://www.aguidetocloud.com/licensing/microsoft-365-e5/","kind":"license","last_verified":"2026-05-04","learn_url":"https://www.microsoft.com/en-us/microsoft-365/enterprise/e5","name":"Microsoft 365 E5","official":"Microsoft 365 E5 combines the productivity apps of Office 365 E5 with Windows 11 Enterprise, Enterprise Mobility + Security E5, and advanced Microsoft 365 security, compliance, voice, and analytics capabilities.","old_names":[],"plain_english":"The full enterprise plan — everything in E3 plus advanced security (MDE Plan 2, MDI, MDCA, MDO Plan 2), advanced compliance (Purview), Teams Phone, Power BI Pro, and Audio Conferencing.","plans":["List price: USD $57/user/month (current). Increases to USD $61/user/month effective 1 July 2026."],"portal_url":"","related_certs":["ms-900","ms-100"],"related_tools":["licence-picker"],"slug":"m365-e5","status":"ga","synonyms":[],"url":"/m365-e5/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":"List price rises from USD $57 → $61/user/month on 1 July 2026"},{"abbreviations":["F3"],"aliases":["microsoft-365-f3","m365f3","frontline-f3"],"domain":"productivity","has_take":true,"included_in":[],"includes":[{"note":"2 GB mailbox · web/mobile only · no desktop apps","slug":"exchange-online"},{"note":"","slug":"teams"},{"note":"","slug":"sharepoint"},{"note":"2 GB per user","slug":"onedrive"},{"note":"Conditional Access, MFA, SSO","slug":"entra-p1"},{"note":"via Entra ID P1","slug":"mfa"},{"note":"via Entra ID P1","slug":"conditional-access"},{"note":"Plan 1","slug":"intune"},{"note":"","slug":"eop"}],"includes_source":"https://www.aguidetocloud.com/licensing/microsoft-365-f3/","kind":"license","last_verified":"2026-05-04","learn_url":"https://www.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-f3","name":"Microsoft 365 F3","official":"An affordable solution for firstline workers. Provides cloud-based productivity, security, identity, and device management capabilities optimized for frontline roles.","old_names":[],"plain_english":"The frontline worker plan — web/mobile Office (no desktop), 2 GB mailbox, Teams, Intune, Entra P1, Defender. Built for shift workers, retail, healthcare staff.","plans":["List price: USD $8/user/month","Copilot eligible (since June 2024)"],"portal_url":"","related_certs":["ms-900"],"related_tools":["licence-picker"],"slug":"m365-f3","status":"ga","synonyms":["frontline","firstline","frontline worker","firstline worker","shift worker plan"],"url":"/m365-f3/","voice":{"mascot":"","sush_take":"F1/F3 ARE Copilot-eligible since June 2024. Frontline doesn't mean second-class anymore — that myth dies hard.","sush_take_status":"spicy"},"watch":""},{"abbreviations":["BP"],"aliases":["microsoft-365-business-premium","m365-bp","business-premium"],"domain":"productivity","has_take":true,"included_in":[],"includes":[{"note":"50 GB mailbox","slug":"exchange-online"},{"note":"","slug":"teams"},{"note":"","slug":"sharepoint"},{"note":"1 TB per user","slug":"onedrive"},{"note":"Conditional Access, MFA, SSO","slug":"entra-p1"},{"note":"via Entra ID P1","slug":"mfa"},{"note":"via Entra ID P1","slug":"conditional-access"},{"note":"SMB-tier EDR (lighter than MDE Plan 2)","slug":"defender-for-business"},{"note":"Plan 1 only — Safe Links, Safe Attachments","slug":"mdo"},{"note":"Plan 1","slug":"intune"},{"note":"","slug":"autopilot"},{"note":"","slug":"eop"},{"note":"via Intune","slug":"compliance-policies"}],"includes_source":"https://www.aguidetocloud.com/licensing/microsoft-365-business-premium/","kind":"license","last_verified":"2026-05-04","learn_url":"https://www.microsoft.com/en-us/microsoft-365/business/microsoft-365-business-premium","name":"Microsoft 365 Business Premium","official":"An integrated solution for businesses with up to 300 employees. Includes the productivity apps and services in Microsoft 365 Business Standard, plus advanced security and device management.","old_names":["Microsoft 365 Business"],"plain_english":"The SMB sweet-spot plan (≤300 users) — Office desktop, Exchange/SharePoint/Teams, Intune, Entra P1, Defender for Business, Defender for Office Plan 1. Most enterprise security features at a quarter of E5 cost.","plans":["List price: USD $22/user/month","≤300 user cap (organizations larger than this need an enterprise plan)"],"portal_url":"","related_certs":["ms-900"],"related_tools":["licence-picker"],"slug":"m365-business-premium","status":"ga","synonyms":["smb plan","business plan","business security plan","small business plan"],"url":"/m365-business-premium/","voice":{"mascot":"","sush_take":"BP is the most underused license in the catalog. Sub-300-user orgs paying for E3 should run the math — BP gets you a lot of the E5 security story at roughly 40% of E5's price.","sush_take_status":"spicy"},"watch":""},{"abbreviations":[],"aliases":["m365-copilot","microsoft-365-copilot","copilot-for-m365"],"domain":"ai","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/copilot/microsoft-365/","name":"Microsoft 365 Copilot","official":"An AI-powered productivity tool that uses large language models and integrates with Microsoft 365 apps and your data to enhance creativity, productivity, and skills.","old_names":[],"plain_english":"Generative AI woven into Word, Excel, PowerPoint, Outlook, Teams — drafts, summarizes, analyses, designs, recaps. Grounded in your tenant's content via the Microsoft Graph and Semantic Index.","plans":["USD /user/month add-on","Requires a qualifying base license (E3/E5, Business Standard/Premium, F1/F3, A3/A5)"],"portal_url":"https://copilot.microsoft.com/","related_certs":["mb-800","ms-100"],"related_tools":["copilot-feature-matrix","copilot-frontier-map","readiness"],"slug":"m365-copilot","status":"ga","synonyms":["m365 ai","office ai","productivity ai","office copilot","ms365 copilot"],"url":"/m365-copilot/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":"Frontline F1/F3 became Copilot-eligible June 2024 — Researcher and Analyst agents added late 2025/early 2026"},{"abbreviations":[],"aliases":["copilot-studio","ms-copilot-studio"],"domain":"ai","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/microsoft-copilot-studio/","name":"Microsoft Copilot Studio","official":"A low-code platform for building, customizing, and deploying conversational AI agents. Extends Microsoft 365 Copilot, builds standalone agents, and integrates with the Microsoft Power Platform.","old_names":["Power Virtual Agents","PVA"],"plain_english":"Low-code agent builder — drag-drop topics, knowledge sources, generative answers, MCP plugins, and connect to data via Power Platform connectors. Sits next to (or inside) M365 Copilot.","plans":["Pay-as-you-go via Copilot Studio messages","Pre-paid capacity packs","Included tenants for some M365 Copilot scenarios"],"portal_url":"https://copilotstudio.microsoft.com/","related_certs":["mb-800"],"related_tools":["agent-builder-guide","agent-365-planner"],"slug":"copilot-studio","status":"ga","synonyms":["agent builder","low-code copilot","chatbot builder"],"url":"/copilot-studio/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":"MCP plugin support shipped late 2025 — agent-builder paradigm continues evolving"},{"abbreviations":[],"aliases":["agent365","microsoft-agent-365"],"domain":"ai","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/copilot/","name":"Microsoft Agent 365","official":"An evolution of Microsoft 365 Copilot toward agentic experiences — autonomous agents that can plan, act, and learn across the Microsoft 365 surface and integrated services.","old_names":[],"plain_english":"Microsoft's agentic AI offering — gives every user their own set of personal and team agents that can act, reason, and use tools across the M365 surface and beyond.","plans":["Bundling and pricing finalising — refer to current Microsoft licensing announcements"],"portal_url":"","related_certs":[],"related_tools":["agent-365-planner","copilot-frontier-map"],"slug":"agent-365","status":"ga","synonyms":["entra agent id","copilot agents","personal agents","agentic ai"],"url":"/agent-365/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":"Post-GA bundling and pricing still finalising — refer to current Microsoft licensing announcements"},{"abbreviations":[],"aliases":["microsoft-purview"],"domain":"governance","has_take":false,"included_in":[{"note":"advanced compliance — Insider Risk, eDiscovery Premium, Audit Premium","slug":"m365-e5"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/purview/","name":"Microsoft Purview","official":"A comprehensive set of solutions to help govern, protect, and manage data across the entire data estate, on-premises, multicloud, and SaaS environments.","old_names":["Microsoft Compliance Center","Microsoft 365 Compliance"],"plain_english":"The unified data governance + compliance suite — data classification, sensitivity labels, DLP, eDiscovery, insider risk, communication compliance, audit, records management.","plans":["Capabilities split across multiple SKUs (M365 E3, M365 E5, M365 E5 Compliance, A la carte)","Use the licensing matrix on Microsoft Learn to plan"],"portal_url":"https://purview.microsoft.com/","related_certs":["sc-401","sc-400"],"related_tools":["purview-starter","compliance-passport"],"slug":"purview","status":"ga","synonyms":["dlp","data loss prevention","data classification","data governance","sensitivity labels"],"url":"/purview/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["pim-groups","privileged-identity-management-for-groups"],"domain":"identity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/concept-pim-for-groups","name":"PIM for Groups","official":"Extends Privileged Identity Management to enable just-in-time, approval-based, and time-bound activation of group membership for security groups, including those used for role assignments and app access.","old_names":[],"plain_english":"Apply PIM-style time-bound activation to membership in security groups (not just role assignments) — useful for app access, RBAC roles assigned to groups, and SaaS app group membership.","plans":["Requires Microsoft Entra ID P2 or Microsoft Entra ID Governance"],"portal_url":"https://entra.microsoft.com/","related_certs":["sc-300"],"related_tools":[],"slug":"pim-for-groups","status":"ga","synonyms":["group jit","group activation","group elevation"],"url":"/pim-for-groups/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["access-review","entra-access-reviews"],"domain":"identity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview","name":"Access Reviews","official":"An Microsoft Entra ID Governance feature that helps organizations efficiently manage group memberships, access to enterprise applications, and role assignments through periodic reviews.","old_names":[],"plain_english":"Periodically (or one-off) ask reviewers to confirm that users still need their group memberships, role assignments, app access, or guest accounts. Automate the deprovisioning when they don't.","plans":["Microsoft Entra ID P2 or Microsoft Entra ID Governance"],"portal_url":"https://entra.microsoft.com/","related_certs":["sc-300"],"related_tools":[],"slug":"access-reviews","status":"ga","synonyms":["entitlement reviews","access certification","membership review","guest review"],"url":"/access-reviews/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["sign-ins","entra-sign-in-logs","signin-logs"],"domain":"identity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-sign-ins","name":"Microsoft Entra Sign-in Logs","official":"Reports that provide insights into who signs in, when, from where, and how — including all interactive and non-interactive sign-in attempts and the policies that evaluated them.","old_names":["Azure AD Sign-in logs"],"plain_english":"Where you go to debug 'why can't this user sign in?' — every sign-in attempt with conditional access policy decisions, MFA outcomes, location, and device telemetry.","plans":["Free tier — 7 day retention","Entra ID P1 — 30 day retention","Entra ID P2 — 30 day retention with risk fields"],"portal_url":"https://entra.microsoft.com/#view/Microsoft_AAD_IAM/SignInsBlade","related_certs":["sc-300"],"related_tools":[],"slug":"sign-in-logs","status":"ga","synonyms":["login logs","sign in audit","authentication logs","login audit"],"url":"/sign-in-logs/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["defender-cloud","microsoft-defender-for-cloud"],"domain":"security","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/azure/defender-for-cloud/","name":"Microsoft Defender for Cloud","official":"A cloud-native application protection platform (CNAPP) with a set of security measures and practices designed to protect cloud-based applications from various cyber threats and vulnerabilities.","old_names":["Azure Security Center","Azure Defender"],"plain_english":"Cloud security posture management (CSPM) and cloud workload protection (CWPP) for Azure, AWS, GCP — finds misconfigurations, unhealthy resources, and active threats across your multi-cloud.","plans":["Free CSPM (basic)","Defender CSPM (advanced posture, agentless scanning)","Defender for Servers/Storage/SQL/etc. (per-workload Plans 1 and 2)"],"portal_url":"https://portal.azure.com/#view/Microsoft_Azure_Security/SecurityMenuBlade","related_certs":["sc-200","az-500"],"related_tools":[],"slug":"defender-for-cloud","status":"ga","synonyms":["cspm","cwpp","cnapp","cloud security posture","multicloud security"],"url":"/defender-for-cloud/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":["XDR"],"aliases":["defender-xdr","microsoft-defender-xdr"],"domain":"security","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"acronym-only","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/defender-xdr/","name":"Extended Detection and Response","official":"A unified security incident detection and response platform that automatically collects and correlates data from multiple proprietary security components.","old_names":["Microsoft 365 Defender"],"plain_english":"Security tooling that correlates signals across endpoints, identities, email, cloud apps, and cloud workloads — instead of one alert per silo, you get one stitched-together incident.","plans":["In Microsoft's stack, XDR is delivered by Microsoft Defender XDR (security.microsoft.com) — combines MDE, MDI, MDO, MDCA"],"portal_url":"https://security.microsoft.com/","related_certs":["sc-200"],"related_tools":[],"slug":"xdr","status":"ga","synonyms":["extended detection and response","threat correlation","unified incident"],"url":"/xdr/","voice":{"mascot":"","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["microsoft-sentinel"],"domain":"security","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-04","learn_url":"https://learn.microsoft.com/en-us/azure/sentinel/","name":"Microsoft Sentinel","official":"A scalable, cloud-native security information and event management (SIEM) solution with built-in security orchestration, automation, and response (SOAR) capabilities, powered by AI.","old_names":["Azure Sentinel"],"plain_english":"Cloud-native SIEM + SOAR — collect logs from anywhere (Microsoft, AWS, GCP, on-prem, third-party SaaS), hunt threats with KQL, and automate response with playbooks.","plans":["Pay-as-you-go (per GB ingested) or commitment tiers","Some Microsoft data sources free (sign-in logs, etc.)"],"portal_url":"https://portal.azure.com/#view/HubsExtension/BrowseResource/resourceType/Microsoft.SecurityInsights%2FSentinel","related_certs":["sc-200","az-500"],"related_tools":[],"slug":"sentinel","status":"ga","synonyms":["siem","soar","security monitoring","log aggregation security","threat hunting"],"url":"/sentinel/","voice":{"mascot":"🌐 The all-seeing log lake","sush_take":"","sush_take_status":"neutral"},"watch":""},{"abbreviations":[],"aliases":["entra","microsoft-entra","microsoft-entra-id"],"domain":"identity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/entra/fundamentals/whatis","name":"Microsoft Entra ID","official":"A cloud-based identity and access management service that helps employees access external resources, such as Microsoft 365, the Azure portal, and SaaS applications, as well as internal resources like apps on a corporate intranet.","old_names":["Azure Active Directory","Azure AD","AAD"],"plain_english":"Microsoft's cloud identity service — the directory of users, groups, and apps that powers sign-in across M365, Azure, and thousands of SaaS apps. The free tier handles cloud identity; P1 adds Conditional Access, P2 adds risk-based policies and PIM.","plans":["Free tier (included with any M365 / Azure subscription)","P1 — Conditional Access, group-based licensing (M365 E3, F3, Business Premium)","P2 — risk-based CA, PIM, Identity Protection, Access Reviews (M365 E5)"],"portal_url":"https://entra.microsoft.com/","related_certs":["sc-300","ms-100"],"related_tools":["licence-picker"],"slug":"entra-id","status":"ga","synonyms":["identity provider","idp","directory service","user directory"],"url":"/entra-id/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["microsoft-azure","azure-cloud"],"domain":"dev","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/azure/","name":"Microsoft Azure","official":"A cloud computing platform and online portal that allows you to access and manage cloud services and resources provided by Microsoft. Includes IaaS, PaaS, and SaaS offerings.","old_names":["Windows Azure"],"plain_english":"Microsoft's public cloud platform — virtual machines, storage, databases, networking, AI, and 200+ other services. Pay-as-you-go pricing. The infrastructure layer beneath Microsoft 365 and Microsoft's own AI products.","plans":["Pay-as-you-go (consumption-based)","Reserved instances and savings plans for committed workloads","Free tier — popular services with limits, plus a $200 credit for new accounts"],"portal_url":"https://portal.azure.com/","related_certs":["az-900","az-104","az-305"],"related_tools":[],"slug":"azure","status":"ga","synonyms":["microsoft cloud","azure platform"],"url":"/azure/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":["M365"],"aliases":["m365","ms365"],"domain":"productivity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/microsoft-365/","name":"Microsoft 365","official":"A cloud-based subscription service that brings together Office desktop and web apps, cloud-based productivity services, intelligent security, and device management for businesses and individuals.","old_names":[],"plain_english":"Microsoft's productivity suite — Office apps (Word, Excel, PowerPoint, Outlook, Teams) bundled with cloud services (Exchange, SharePoint, OneDrive), security (Defender, Entra ID, Intune), and Windows. Sold per-user/month in tiers (E3, E5, F3, Business Premium).","plans":["Enterprise: E3, E5, F3 (per-user/month)","Business: Basic, Standard, Premium (≤300 users)","Education: A1, A3, A5","Personal/Family for consumers"],"portal_url":"https://admin.microsoft.com/","related_certs":["ms-900","ms-100"],"related_tools":["licence-picker","copilot-feature-matrix"],"slug":"microsoft-365","status":"ga","synonyms":["microsoft 365 suite","office suite"],"url":"/microsoft-365/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["o365","office365"],"domain":"productivity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/microsoft-365/enterprise/o365-plan-options","name":"Office 365","official":"A subscription service that includes the Office productivity applications and other cloud-based services. Sold as Office 365 E1, E3, and E5 SKUs alongside Microsoft 365 plans.","old_names":["BPOS (Business Productivity Online Suite)"],"plain_english":"The productivity-only sub-bundle inside Microsoft 365 — Office apps + Exchange + SharePoint + Teams, but WITHOUT Windows or EMS. Still sold as Office 365 E1/E3/E5 SKUs. People often say 'Office 365' when they mean 'Microsoft 365' — they're related but not the same.","plans":["E1 — web/mobile Office + cloud services","E3 — adds desktop Office, basic compliance","E5 — adds advanced security/compliance, Power BI Pro, Audio Conferencing"],"portal_url":"https://admin.microsoft.com/","related_certs":["ms-900"],"related_tools":["licence-picker"],"slug":"office-365","status":"ga","synonyms":["productivity suite"],"url":"/office-365/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["microsoft-teams","ms-teams"],"domain":"productivity","has_take":false,"included_in":[{"note":"","slug":"m365-e3"},{"note":"+ Phone System + Audio Conferencing","slug":"m365-e5"},{"note":"","slug":"m365-f3"},{"note":"","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/microsoftteams/teams-overview","name":"Microsoft Teams","official":"A persistent chat-based collaboration platform complete with document sharing, online meetings, calling, and many more useful features for business communications.","old_names":["Skype for Business"],"plain_english":"The chat, meetings, calling, and collaboration app — replaces Skype for Business. Sits at the centre of M365 for messaging, video calls, file sharing, and external guest collaboration. Has its own apps platform and is the front-end for many Copilot interactions.","plans":["Included in: M365 E3/E5, Business Standard/Premium, F3, Office 365 E1/E3/E5","Teams Phone — separate add-on for calling (PSTN)","Teams Essentials — standalone for SMB without M365"],"portal_url":"https://admin.teams.microsoft.com/","related_certs":["ms-700","ms-100"],"related_tools":[],"slug":"teams","status":"ga","synonyms":["video conferencing","ms collaboration"],"url":"/teams/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":["SPO"],"aliases":["sharepoint-online"],"domain":"productivity","has_take":false,"included_in":[{"note":"","slug":"m365-e3"},{"note":"","slug":"m365-e5"},{"note":"","slug":"m365-f3"},{"note":"","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/sharepoint/sharepoint-online","name":"SharePoint Online","official":"A web-based collaborative platform that integrates with Microsoft 365 and is primarily used as a document management and storage system. Powers intranet sites, team sites, and provides the foundation for Microsoft 365 collaboration.","old_names":["SharePoint Server"],"plain_english":"Microsoft's intranet, document management, and team-sites platform — where organisations store internal pages, files, lists, and workflows. The storage backbone for OneDrive (your files) and Teams (team files). On-prem versions also exist (2013/2016/2019 SE) but most orgs are cloud-first.","plans":["Included in: M365 E3/E5, Business Basic/Standard/Premium, F3","SharePoint Plan 1/Plan 2 — standalone tiers","SharePoint Server 2019 / SE — on-prem (separately licensed)"],"portal_url":"https://admin.microsoft.com/sharepoint","related_certs":["ms-203","ms-100"],"related_tools":[],"slug":"sharepoint","status":"ga","synonyms":["intranet","team sites","document libraries"],"url":"/sharepoint/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":["EXO"],"aliases":["online-exchange"],"domain":"productivity","has_take":true,"included_in":[{"note":"100 GB mailbox","slug":"m365-e3"},{"note":"100 GB mailbox","slug":"m365-e5"},{"note":"2 GB mailbox · web/mobile only · no desktop apps","slug":"m365-f3"},{"note":"50 GB mailbox","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/exchange/exchange-online","name":"Exchange Online","official":"A hosted messaging solution that delivers email, calendar, contacts, and tasks accessed from desktops, laptops, web, and mobile devices. Provides enterprise-grade email management as part of Microsoft 365.","old_names":["BPOS (legacy hosted Exchange)"],"plain_english":"Microsoft's cloud-hosted email and calendar service. Every M365 user with a mailbox is on Exchange Online. EOP (Exchange Online Protection) sits in front of every mailbox by default; MDO Plan 1/2 adds advanced threat protection.","plans":["Plan 1 — 50GB mailbox, included in M365 E3/F3, Business Premium","Plan 2 — 100GB mailbox + archive + DLP, included in M365 E5","Kiosk plan — 2GB, included in M365 F3"],"portal_url":"https://admin.exchange.microsoft.com/","related_certs":["ms-203","ms-100"],"related_tools":[],"slug":"exchange-online","status":"ga","synonyms":["company email","hosted email","cloud mailbox"],"url":"/exchange-online/","voice":{"mascot":"📬 The mail engine room","sush_take":"Outlook is the front-end you see. Exchange Online is the engine, and you don't manage it the same way. Get familiar with EAC and PowerShell or you'll be blocked by basic things.","sush_take_status":"spicy"},"watch":""},{"abbreviations":["ODFB"],"aliases":["one-drive","onedrive-for-business"],"domain":"productivity","has_take":false,"included_in":[{"note":"","slug":"m365-e3"},{"note":"","slug":"m365-e5"},{"note":"2 GB per user","slug":"m365-f3"},{"note":"1 TB per user","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/onedrive/plan-onedrive-enterprise","name":"OneDrive for Business","official":"A cloud-based file storage and sharing service that lets users store and share files securely from any device. Part of the Microsoft 365 productivity suite.","old_names":["SkyDrive Pro","SkyDrive"],"plain_english":"Personal cloud file storage for each Microsoft 365 user — sync files between devices, share with colleagues, and roll back to earlier versions. Backed by SharePoint under the hood (each user gets a hidden personal SharePoint site).","plans":["Plan 1 — 1TB, included in M365 Business Basic/Standard/Premium, E3","Plan 2 — 5TB+ scaling, included in E5","Kiosk — 2GB, included in M365 F3"],"portal_url":"https://admin.microsoft.com/onedrive","related_certs":["ms-100"],"related_tools":[],"slug":"onedrive","status":"ga","synonyms":["file sync","cloud storage","personal drive"],"url":"/onedrive/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["windows-bitlocker"],"domain":"endpoint","has_take":true,"included_in":[{"note":"via Windows 11 Enterprise E3","slug":"m365-e3"},{"note":"via Windows 11 Enterprise E5","slug":"m365-e5"}],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/","name":"BitLocker","official":"A data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. Provides volume encryption and integrity checking via TPM.","old_names":[],"plain_english":"Windows' built-in full-disk encryption. Protects data at rest if a laptop is lost or stolen. Free to use on Windows Pro/Enterprise/Education. Manage and recover keys via Intune (cloud) or Active Directory (on-prem).","plans":["Built into Windows Pro/Enterprise/Education editions (no extra licence)","Recovery key management requires Intune (with Entra ID) or Active Directory + MBAM/SCCM"],"portal_url":"https://intune.microsoft.com/","related_certs":["md-102"],"related_tools":[],"slug":"bitlocker","status":"ga","synonyms":["disk encryption","drive encryption","full disk encryption"],"url":"/bitlocker/","voice":{"mascot":"🔐 The default laptop lock","sush_take":"Free in Windows 11 Pro. If your fleet ships without it on in 2026, that's a process gap, not a license one.","sush_take_status":"spicy"},"watch":""},{"abbreviations":["WHfB"],"aliases":["windows-hello","whfb"],"domain":"identity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/","name":"Windows Hello for Business","official":"Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. Provides enterprise-grade biometric and PIN authentication tied to the device's TPM.","old_names":["Microsoft Passport"],"plain_english":"Passwordless sign-in for Windows devices — uses a PIN, fingerprint, face, or hardware key tied to the device's TPM. Different from consumer Windows Hello: WHfB is enterprise-managed, certificate-backed, and integrates with Entra ID and Active Directory.","plans":["Built into Windows Pro/Enterprise/Education (no extra licence)","Cloud trust deployment requires Entra ID; hybrid trust requires AD + Entra Connect"],"portal_url":"https://intune.microsoft.com/","related_certs":["sc-300","md-102"],"related_tools":[],"slug":"windows-hello-for-business","status":"ga","synonyms":["passwordless sign-in","biometric sign-in","pin sign-in"],"url":"/windows-hello-for-business/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":["MDB"],"aliases":["defender-business","microsoft-defender-for-business"],"domain":"security","has_take":false,"included_in":[{"note":"SMB-tier EDR (lighter than MDE Plan 2)","slug":"m365-business-premium"}],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/defender-business/","name":"Microsoft Defender for Business","official":"An enterprise-grade device security solution for small and medium-sized businesses (up to 300 employees). Provides next-generation antivirus, endpoint detection and response, threat and vulnerability management, and cyberthreat intelligence.","old_names":[],"plain_english":"MDE's little sibling — endpoint detection and response built specifically for businesses with up to 300 employees. Same Defender engine, simpler admin experience, lower price point. Included in Microsoft 365 Business Premium; standalone for SMB without BP.","plans":["Included in M365 Business Premium","Standalone — USD $3/user/month (up to 300 users)","Defender for Business servers — separate per-server add-on"],"portal_url":"https://security.microsoft.com/","related_certs":["sc-200","ms-900"],"related_tools":["licence-picker"],"slug":"defender-for-business","status":"ga","synonyms":["smb endpoint security","small business antivirus"],"url":"/defender-for-business/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["defender-servers","microsoft-defender-for-servers"],"domain":"security","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-servers-introduction","name":"Microsoft Defender for Servers","official":"A plan within Microsoft Defender for Cloud that adds threat detection and advanced defenses for Windows and Linux machines that run in Azure, AWS, GCP, and on-premises environments.","old_names":["Azure Defender for Servers"],"plain_english":"Server protection for Azure VMs, on-prem servers, and AWS/GCP servers — sits inside Microsoft Defender for Cloud. Plan 1 covers basic threat detection; Plan 2 adds full MDE capabilities, vulnerability assessment, and just-in-time access.","plans":["Plan 1 — basic threat detection (foundational EDR)","Plan 2 — full MDE Plan 2 + vulnerability assessment + JIT VM access + file integrity monitoring","Pricing per server/month, billed via Azure"],"portal_url":"https://portal.azure.com/#view/Microsoft_Azure_Security/SecurityMenuBlade","related_certs":["sc-200","az-500"],"related_tools":[],"slug":"defender-for-servers","status":"ga","synonyms":["server protection","vm threat protection"],"url":"/defender-for-servers/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":["AVD"],"aliases":["avd"],"domain":"endpoint","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/azure/virtual-desktop/","name":"Azure Virtual Desktop","official":"A desktop and app virtualization service that runs on the cloud. Provides a Windows experience for users with Windows 11, Windows 10, Windows Server, and Linux VMs delivered from Azure.","old_names":["Windows Virtual Desktop","WVD"],"plain_english":"Microsoft's flexible desktop-as-a-service on Azure — full Windows desktops or apps streamed from the cloud. You manage the host pools, sizing, and image. Different from Windows 365 (which is a fixed Cloud PC per user).","plans":["Per-user access licence included in: M365 E3/E5/F3, Business Premium","Compute, storage, and networking billed via Azure consumption","Windows Enterprise multi-session OS — exclusive to AVD"],"portal_url":"https://portal.azure.com/","related_certs":["az-140","md-102"],"related_tools":[],"slug":"azure-virtual-desktop","status":"ga","synonyms":["daas","desktop as a service","virtual desktop infrastructure"],"url":"/azure-virtual-desktop/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":["W365"],"aliases":["w365","win365","cloud-pc"],"domain":"endpoint","has_take":true,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/windows-365/","name":"Windows 365","official":"A cloud-based service that automatically creates a new type of Windows virtual machine (Cloud PC) for end users. Provides each user a personalized Windows desktop, apps, settings, and content from the Microsoft cloud across any device.","old_names":[],"plain_english":"Microsoft's fixed-cost Cloud PC — a personal Windows 11 desktop in the cloud, per-user/month price, managed via Intune. Simpler than AVD (no Azure infrastructure to size) but less flexible. Comes in Business and Enterprise tiers.","plans":["Windows 365 Business — per-user/month, simpler admin, ≤300 users","Windows 365 Enterprise — per-user/month, Intune-managed, scales to enterprise","Frontline (shared) — for shift-worker scenarios"],"portal_url":"https://windows365.microsoft.com/","related_certs":["md-102"],"related_tools":[],"slug":"windows-365","status":"ga","synonyms":["personal cloud pc","managed windows desktop"],"url":"/windows-365/","voice":{"mascot":"🖥️ The fixed-price Cloud PC","sush_take":"AVD is a power tool — you build the multi-session host, you size it, you optimise it. Windows 365 is a fixed-price contract — Microsoft hands you a Cloud PC. Different shape, different bill, different audience. Pick on audience first, price second.","sush_take_status":"spicy"},"watch":"Frontline (shared) plan added 2025 for shift workers — same Cloud PC, time-shared by multiple users"},{"abbreviations":[],"aliases":["graph-api","ms-graph"],"domain":"dev","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/graph/overview","name":"Microsoft Graph","official":"The gateway to data and intelligence in Microsoft 365, Windows, and Enterprise Mobility + Security. Provides a unified programmability model that you can use to access vast amounts of data.","old_names":["Office 365 Unified API"],"plain_english":"The single API gateway to all Microsoft 365 data — users, groups, emails, files, calendar, Teams, devices, security signals. Apps, scripts, and Copilot all use it. Authenticate with Entra ID, scope permissions, query via REST or SDK.","plans":["No licence required — included with any M365 / Azure tenant","Some endpoints require specific licences (e.g. Defender, Purview)","Permissions: delegated (user) or application (service)"],"portal_url":"https://developer.microsoft.com/en-us/graph/graph-explorer","related_certs":["ms-100","ai-102"],"related_tools":[],"slug":"microsoft-graph","status":"ga","synonyms":["m365 api","microsoft 365 api"],"url":"/microsoft-graph/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":["microsoft-viva"],"domain":"productivity","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/viva/microsoft-viva-overview","name":"Microsoft Viva","official":"An integrated employee experience platform that brings together communications, knowledge, learning, resources, and insights, embedded in the apps and services people use every day, like Microsoft Teams.","old_names":[],"plain_english":"Microsoft's employee-experience suite — a collection of apps inside Teams covering wellbeing (Insights), communications (Connections, Engage), learning (Learning), goals (Goals), and discovery (Topics, Pulse). Most modules need Viva Suite or specific add-ons.","plans":["Viva Suite — full bundle (Insights, Goals, Pulse, Glint, Learning, Topics, etc.)","Individual modules — Insights, Connections, Engage available standalone or via specific bundles","Some entry-level Viva features included in M365 E3/E5"],"portal_url":"https://admin.microsoft.com/","related_certs":["ms-100"],"related_tools":[],"slug":"viva","status":"ga","synonyms":["employee experience","ee platform","people platform"],"url":"/viva/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":"Viva Topics retired during 2025 — knowledge surfacing now lives inside M365 Copilot grounding"},{"abbreviations":["KQL"],"aliases":["kusto-query-language","kusto"],"domain":"data","has_take":true,"included_in":[],"includes":[],"includes_source":"","kind":"acronym-only","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/kusto/query/","name":"Kusto Query Language","official":"A read-only query language for processing data and returning results. Designed to be easy to read and author, especially for users with experience with SQL or other query languages.","old_names":[],"plain_english":"The query language behind Azure Data Explorer, Sentinel, Defender XDR Advanced Hunting, Log Analytics, and Application Insights. SQL-ish but log-focused — pipe operators, time-series functions, and built-in security/operations helpers.","plans":["Free to learn and use — included anywhere KQL is exposed (Azure Data Explorer, Sentinel, Log Analytics, Defender, App Insights)"],"portal_url":"https://dataexplorer.azure.com/","related_certs":["sc-200","az-500"],"related_tools":[],"slug":"kql","status":"ga","synonyms":["log query language","azure query language"],"url":"/kql/","voice":{"mascot":"🔭 The security telescope","sush_take":"If you're in security in 2026 and you don't read KQL, you're working blindfolded. Sentinel speaks it, Defender speaks it, M365 audit speaks it. An hour a week for a quarter and you'll wonder how you ever lived without.","sush_take_status":"spicy"},"watch":""},{"abbreviations":[],"aliases":["microsoft-secure-score","m365-secure-score"],"domain":"security","has_take":true,"included_in":[],"includes":[],"includes_source":"","kind":"feature","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/defender-xdr/microsoft-secure-score","name":"Microsoft Secure Score","official":"A measurement of an organization's security posture, with a higher number indicating more improvement actions taken. Shows recommendations for Identity, Devices, Apps, Data, and Infrastructure.","old_names":["Office 365 Secure Score"],"plain_english":"A measurement of your tenant's security posture across Microsoft 365 and Azure — the more recommended controls you've configured, the higher your score. Lives in the Defender portal. Shows points-by-action and ranks against orgs of similar size.","plans":["Free — included with any M365 / Defender / Entra subscription","Coverage depends on which Defender / Purview / Entra products are licensed in the tenant"],"portal_url":"https://security.microsoft.com/securescore","related_certs":["sc-200","sc-900"],"related_tools":[],"slug":"secure-score","status":"ga","synonyms":["security posture score","security recommendations"],"url":"/secure-score/","voice":{"mascot":"📊 The hygiene scoreboard","sush_take":"A number, not a strategy. Watching it climb is satisfying; mistaking it for security is dangerous. The score is a checklist — the strategy is which boxes are worth ticking.","sush_take_status":"spicy"},"watch":""},{"abbreviations":["AOAI"],"aliases":["azure-openai-service","aoai"],"domain":"ai","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"product","last_verified":"2026-05-05","learn_url":"https://learn.microsoft.com/en-us/azure/ai-services/openai/overview","name":"Azure OpenAI Service","official":"Provides REST API access to OpenAI's powerful language models, including the GPT-4o family, GPT-5, the o-series, and embedding models. With Azure OpenAI, customers get the security capabilities of Microsoft Azure while running the same models as OpenAI.","old_names":[],"plain_english":"OpenAI's models (GPT-4, GPT-5, o-series, embeddings, DALL·E, Whisper) running inside Azure with enterprise networking, data isolation, RBAC, and regional residency. Separate from M365 Copilot — this is for building your own AI apps.","plans":["Pay-as-you-go per 1K tokens (input + output, varies by model)","Provisioned throughput units (PTUs) for predictable latency at higher cost","Free tier — limited evaluation quota"],"portal_url":"https://oai.azure.com/","related_certs":["ai-102"],"related_tools":["copilot-frontier-map"],"slug":"azure-openai","status":"ga","synonyms":["openai on azure","gpt on azure","enterprise openai"],"url":"/azure-openai/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":"Provisioned Throughput Units (PTUs) increasingly recommended for predictable latency — pay-per-token still default"},{"abbreviations":["EMS"],"aliases":["enterprise-mobility-security","ems-bundle"],"domain":"licensing","has_take":false,"included_in":[],"includes":[{"note":"EMS E3 baseline (CA/MFA/SSO)","slug":"entra-p1"},{"note":"EMS E5 only — PIM, risk-based access, identity protection","slug":"entra-p2"},{"note":"Plan 1","slug":"intune"},{"note":"via Entra ID P1","slug":"mfa"},{"note":"via Entra ID P1","slug":"conditional-access"},{"note":"EMS E5 only — CASB","slug":"mdca"},{"note":"EMS E5 only — Defender for Identity (originally part of EMS suite)","slug":"mdi"},{"note":"via Intune","slug":"compliance-policies"}],"includes_source":"https://www.aguidetocloud.com/licensing/ems-e3-e5/","kind":"license","last_verified":"2026-05-05","learn_url":"https://www.microsoft.com/en-us/security/business/microsoft-enterprise-mobility-security","name":"Enterprise Mobility + Security","official":"A comprehensive cloud solution to address consumerization of IT, BYOD, and SaaS challenges. Combines identity management, device management, and information protection. Includes Microsoft Entra ID, Microsoft Intune, Azure Information Protection, and Microsoft Defender for Identity.","old_names":[],"plain_english":"Microsoft's standalone identity-and-device-management bundle — Entra ID, Intune, Azure Information Protection, MDI. Sold separately for orgs that don't want full M365. EMS E3 and E5 align with M365 E3/E5 security tiers.","plans":["EMS E3 — Entra ID P1, Intune Plan 1, Azure Information Protection P1","EMS E5 — adds Entra ID P2, Defender for Identity (MDI), Defender for Cloud Apps (MDCA), AIP P2"],"portal_url":"","related_certs":["ms-900"],"related_tools":["licence-picker"],"slug":"ems","status":"ga","synonyms":["security and identity bundle","ems e3","ems e5"],"url":"/ems/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":[],"domain":"licensing","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"disambiguation","last_verified":"2026-05-04","learn_url":"","name":"P1 — multiple Microsoft products use this code","official":"","old_names":[],"plain_english":"\"P1\" is a Microsoft plan-tier code used by several products. Pick the one you meant:","plans":[],"portal_url":"","related_certs":[],"related_tools":[],"slug":"p1","status":"ga","synonyms":[],"url":"/p1/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":[],"domain":"licensing","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"disambiguation","last_verified":"2026-05-04","learn_url":"","name":"P2 — multiple Microsoft products use this code","official":"","old_names":[],"plain_english":"\"P2\" is a Microsoft plan-tier code used by several products. Pick the one you meant:","plans":[],"portal_url":"","related_certs":[],"related_tools":[],"slug":"p2","status":"ga","synonyms":[],"url":"/p2/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":[],"domain":"licensing","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"disambiguation","last_verified":"2026-05-04","learn_url":"","name":"E5 — Microsoft has several E5 bundles","official":"","old_names":[],"plain_english":"\"E5\" is a tier marker used in several Microsoft enterprise SKUs. Pick the one you meant:","plans":[],"portal_url":"","related_certs":[],"related_tools":[],"slug":"e5","status":"ga","synonyms":[],"url":"/e5/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":[],"domain":"security","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"disambiguation","last_verified":"2026-05-04","learn_url":"","name":"Defender — Microsoft's family of security products","official":"","old_names":["Microsoft 365 Defender (umbrella term, now Defender XDR)"],"plain_english":"\"Defender\" is Microsoft's umbrella security brand — there are several products. Pick the one you meant:","plans":[],"portal_url":"","related_certs":[],"related_tools":[],"slug":"defender","status":"ga","synonyms":[],"url":"/defender/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""},{"abbreviations":[],"aliases":[],"domain":"ai","has_take":false,"included_in":[],"includes":[],"includes_source":"","kind":"disambiguation","last_verified":"2026-05-04","learn_url":"","name":"Copilot — Microsoft has several Copilots","official":"","old_names":[],"plain_english":"\"Copilot\" is Microsoft's AI brand and there are several products under it. Pick the one you meant:","plans":[],"portal_url":"","related_certs":[],"related_tools":[],"slug":"copilot","status":"ga","synonyms":[],"url":"/copilot/","voice":{"mascot":"","sush_take":"","sush_take_status":""},"watch":""}],"generated_at":"2026-07-02T09:31:11Z","skus":{"05e9a617-0261-4cee-bb44-138d3ef5d965":"m365-e3","061f9ace-7d42-4136-88ac-31dc755f143f":"intune","06ebc4ee-1bb5-47dd-8120-11324bc54e06":"m365-e5","078d2b04-f1bd-4111-bbd4-b4b1b354cef4":"entra-p1","111046dd-295b-4d6d-9724-d52ac90bd1f2":"mde","16a55f2f-ff35-4cd5-9146-fb784e3761a5":"mde","18181a46-0d4e-45cd-891e-60aabd171b4e":"office-365","184efa21-98c3-4e5d-95ab-d07053a96e67":"purview","26124093-3d78-432b-b5dc-48bf992543d5":"mdi","3dd6cf57-d688-4eed-ba52-9e40b5468c3e":"mdo","4ef96642-f096-40de-a3e9-d83fb2f90211":"mdo","639dec6b-bb19-468b-871c-c5c441c4b0cb":"m365-copilot","66b55226-6b4f-492c-910c-a3b7a3c9d993":"m365-f3","6fd2c87f-b296-42f0-b197-1e91e994b900":"office-365","84a661c4-e949-4bd2-a560-ed7766fcaf2b":"entra-p2","b05e124f-c7cc-45a0-a6aa-8cf78c946968":"ems","b126b073-72db-4a9d-87a4-b17afe41d4ab":"mde","c7df2760-2c81-4ef7-b578-5b5392b571df":"office-365","cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46":"m365-business-premium","efccb6f7-5641-4e0e-bd10-b4976e1bf68e":"ems"},"version":"20260510152000"}