MICROSOFT LICENSING · MODULE 3 · PURVIEW
Microsoft Purview:
Which compliance capabilities are included, and when is an add-on needed?
Microsoft Purview supports information protection, data loss prevention, retention, audit, investigations, and risk management. Licensing depends on the exact feature and the people or data locations it covers.
The short answer
Assess the exact Purview capability, the required licence tier, and every benefiting user.
Existing Microsoft 365 subscriptions may include basic capabilities. Advanced DLP, Audit, eDiscovery, and risk features often require E5 or an eligible Purview add-on.
- 01Information Protection labels and protects sensitive data.
- 02Data Loss Prevention controls where sensitive information is shared.
- 03Teams, endpoint, and Copilot DLP can require advanced licensing.
- 04Audit Standard and Premium differ, including in retention periods.
- 05Enterprise and Business Premium Purview Suites have different prerequisites.
Start with the basics
What does Microsoft Purview do?
Purview helps an organisation understand its data, protect it, retain it, and investigate relevant activity.
Information Protection and labels
Classify sensitive documents and apply appropriate protection.
Data Loss Prevention
Detect and restrict unwanted sharing of financial, personal, or confidential information.
Retention and records
Apply business and legal retention or deletion requirements to relevant information.
Audit, eDiscovery, and insider risk
Search activity records, investigate relevant content, and assess internal risk scenarios.
Compare licensing models
Which capabilities often require additional rights?
The location, specific capability, and benefiting users determine the real licensing requirement.
| Capability or product | Typical licence | What to check |
|---|---|---|
| Basic information protection | Existing base plan, depending on the exact feature | Not every label or encryption feature is included in every plan. |
| DLP for Exchange, SharePoint, and OneDrive | Existing base rights or eligible add-on, depending on feature | Check location, classifier, rule, and protected user. |
| Teams and endpoint DLP | Typically Microsoft 365 E5 or an eligible Purview Suite | Microsoft documents both as advanced capabilities. |
| Copilot DLP | Eligible E5, Purview Suite, or explicitly qualifying entitlement | A Copilot user licence does not automatically include every Purview data-protection right. |
| Audit Standard and Premium | Standard through eligible base plans; Premium through E5 or suitable add-on | Microsoft documents typical retention of 180 days for Standard and one year for eligible Premium activity. |
| Advanced eDiscovery and insider risk | E5, Purview Suite, or eligible standalone rights | Assess custodians, involved users, data locations, and the exact investigation feature. |
Check before buying
Which Purview add-on matches the existing base plan?
Enterprise and Business Premium suites are separate products with different prerequisites.
Start with existing capabilities
Microsoft 365 E3 or Office 365 E3 may already cover selected baseline capabilities. Check the actual service plan and use case.
Broader compliance entitlements
Microsoft 365 E5 includes many advanced Purview rights, but special consumption-based scenarios can still differ.
Enterprise Purview Suite
Requires Microsoft 365 E3, or Office 365 E3 together with Enterprise Mobility + Security E3.
Purview Suite for Business Premium
The dedicated business add-on explicitly requires Microsoft 365 Business Premium.
Who actually needs a licence?
How many users need a licence when a policy is enabled centrally?
Central configuration neither means one administrator licence is sufficient nor that every tenant account automatically needs the highest tier.
Users covered by the policy
For Teams DLP, assess the people whose chat or channel messages are inspected by the policy.
Users on onboarded devices
Endpoint DLP policies can be scoped to users signing in to onboarded endpoints.
AI data protection
Assess both the Copilot scenario and the Purview capability required to restrict sensitive grounding or interactions.
Possible pay-as-you-go charges
Microsoft identifies pay-as-you-go billing for selected browser or network data-security scenarios.
A practical example
500 E3 users and a Teams DLP policy for 80 people
Only 80 employees need a policy restricting the sharing of sensitive finance data in Teams.
Identify Teams DLP
The requirement is the specific Teams data-loss-prevention capability, not Purview in general.
Check base and advanced rights
The 80 covered people need qualifying base entitlements and an advanced licence that explicitly covers the policy.
Restrict and document the policy
When the feature genuinely applies only to 80 users, the remaining users do not automatically require the same upgrade.
Practical checklist
Practical checklist
- 01Which exact Purview feature is required?
- 02Where does it operate: email, SharePoint, OneDrive, Teams, endpoint, or Copilot?
- 03Which rights are already included in existing subscriptions?
- 04Does the organisation require the enterprise or Business Premium Purview Suite?
- 05Which people are protected, monitored, or included in the policy?
- 06Can the policy be technically limited to licensed users?
- 07Are there additional consumption charges or special audit-retention requirements?
LizenzFrau principle
Do not license Purview as a vague category. Check the exact capability and its actual scope.
A sound decision combines existing base licences, required compliance features, benefiting users, and possible additional consumption.
Official Microsoft sources
Official Microsoft sources
Product capabilities, prerequisites, and usage rights can change. The current Microsoft Product Terms and the actual agreement are authoritative.
- 01Microsoft Learn: Microsoft Purview service description↗
- 02Microsoft Learn: Search the audit log↗
- 03Microsoft Learn: Get started with auditing solutions↗
- 04Microsoft Learn: Learn about eDiscovery↗
- 05Microsoft: Microsoft Purview Suite for enterprise customers↗
- 06Microsoft: Purview Suite for Microsoft 365 Business Premium↗
Note: This article provides practical guidance and does not replace an individual agreement, licensing, or legal assessment.