Knowledge for better technology decisions
Knowledge BaseMicrosoft licensing

MICROSOFT LICENSING · MODULE 3 · PURVIEW

Microsoft Purview:
Which compliance capabilities are included, and when is an add-on needed?

Microsoft Purview supports information protection, data loss prevention, retention, audit, investigations, and risk management. Licensing depends on the exact feature and the people or data locations it covers.

Assess the exact Purview capability, the required licence tier, and every benefiting user.

Existing Microsoft 365 subscriptions may include basic capabilities. Advanced DLP, Audit, eDiscovery, and risk features often require E5 or an eligible Purview add-on.

  1. 01Information Protection labels and protects sensitive data.
  2. 02Data Loss Prevention controls where sensitive information is shared.
  3. 03Teams, endpoint, and Copilot DLP can require advanced licensing.
  4. 04Audit Standard and Premium differ, including in retention periods.
  5. 05Enterprise and Business Premium Purview Suites have different prerequisites.
01

What does Microsoft Purview do?

Purview helps an organisation understand its data, protect it, retain it, and investigate relevant activity.

CLASSIFY

Information Protection and labels

Classify sensitive documents and apply appropriate protection.

PROTECT

Data Loss Prevention

Detect and restrict unwanted sharing of financial, personal, or confidential information.

RETAIN

Retention and records

Apply business and legal retention or deletion requirements to relevant information.

INVESTIGATE

Audit, eDiscovery, and insider risk

Search activity records, investigate relevant content, and assess internal risk scenarios.

02

Which capabilities often require additional rights?

The location, specific capability, and benefiting users determine the real licensing requirement.

Capability or productTypical licenceWhat to check
Basic information protectionExisting base plan, depending on the exact featureNot every label or encryption feature is included in every plan.
DLP for Exchange, SharePoint, and OneDriveExisting base rights or eligible add-on, depending on featureCheck location, classifier, rule, and protected user.
Teams and endpoint DLPTypically Microsoft 365 E5 or an eligible Purview SuiteMicrosoft documents both as advanced capabilities.
Copilot DLPEligible E5, Purview Suite, or explicitly qualifying entitlementA Copilot user licence does not automatically include every Purview data-protection right.
Audit Standard and PremiumStandard through eligible base plans; Premium through E5 or suitable add-onMicrosoft documents typical retention of 180 days for Standard and one year for eligible Premium activity.
Advanced eDiscovery and insider riskE5, Purview Suite, or eligible standalone rightsAssess custodians, involved users, data locations, and the exact investigation feature.
03

Which Purview add-on matches the existing base plan?

Enterprise and Business Premium suites are separate products with different prerequisites.

E3

Start with existing capabilities

Microsoft 365 E3 or Office 365 E3 may already cover selected baseline capabilities. Check the actual service plan and use case.

E5

Broader compliance entitlements

Microsoft 365 E5 includes many advanced Purview rights, but special consumption-based scenarios can still differ.

ENTERPRISE

Enterprise Purview Suite

Requires Microsoft 365 E3, or Office 365 E3 together with Enterprise Mobility + Security E3.

BUSINESS

Purview Suite for Business Premium

The dedicated business add-on explicitly requires Microsoft 365 Business Premium.

04

How many users need a licence when a policy is enabled centrally?

Central configuration neither means one administrator licence is sufficient nor that every tenant account automatically needs the highest tier.

DLP

Users covered by the policy

For Teams DLP, assess the people whose chat or channel messages are inspected by the policy.

ENDPOINT

Users on onboarded devices

Endpoint DLP policies can be scoped to users signing in to onboarded endpoints.

COPILOT

AI data protection

Assess both the Copilot scenario and the Purview capability required to restrict sensitive grounding or interactions.

CONSUMPTION

Possible pay-as-you-go charges

Microsoft identifies pay-as-you-go billing for selected browser or network data-security scenarios.

05

500 E3 users and a Teams DLP policy for 80 people

Only 80 employees need a policy restricting the sharing of sensitive finance data in Teams.

FEATURE

Identify Teams DLP

The requirement is the specific Teams data-loss-prevention capability, not Purview in general.

LICENCES

Check base and advanced rights

The 80 covered people need qualifying base entitlements and an advanced licence that explicitly covers the policy.

SCOPE

Restrict and document the policy

When the feature genuinely applies only to 80 users, the remaining users do not automatically require the same upgrade.

06

Practical checklist

  1. 01Which exact Purview feature is required?
  2. 02Where does it operate: email, SharePoint, OneDrive, Teams, endpoint, or Copilot?
  3. 03Which rights are already included in existing subscriptions?
  4. 04Does the organisation require the enterprise or Business Premium Purview Suite?
  5. 05Which people are protected, monitored, or included in the policy?
  6. 06Can the policy be technically limited to licensed users?
  7. 07Are there additional consumption charges or special audit-retention requirements?

Do not license Purview as a vague category. Check the exact capability and its actual scope.

A sound decision combines existing base licences, required compliance features, benefiting users, and possible additional consumption.

Official Microsoft sources

Product capabilities, prerequisites, and usage rights can change. The current Microsoft Product Terms and the actual agreement are authoritative.

Note: This article provides practical guidance and does not replace an individual agreement, licensing, or legal assessment.