Please contact me on Twitter or LinkedIn if you'd like to discuss, provide feedback, or request changes / updates. All feedback is greatly appreciated!
Cheers,
- Aaron.
2020 / December:
- Made the note in the readme that these diagrams only cover publicly confirmed license types and do not include retired or off-list license plans. Some customers will have retired SKUs in their Enterprise Agreement and won't find them on these diagrams, they should work with their Microsoft team to understand the differences.
- Removed "on a Page" from file names to shorten them for easier navigation on GitHub.
- Updated Defender product names in line with Ignite 2020 announcements: https://www.microsoft.com/security/blog/?p=91813
- Reorganised diagrams to order all boxes alphabetically left-to-right, top-to-bottom, per English language labels. This is intended to help make it easier to locate a feature as they now have a logical order.
- Renamed "Additional Licensing" table in diagrams to "Related Services", as not all items are 'licensing', some are consumption services.
- Added "Advanced Comms" (Advanced Communications) to "Related Services": https://docs.microsoft.com/microsoftteams/teams-add-on-licensing/advanced-communications
- Added "Power BI Premium" to "Related Services": https://powerbi.microsoft.com/power-bi-premium/
- Added "SharePoint Syntex" to "Related Services": https://techcommunity.microsoft.com/t5/project-cortex-blog/announcing-sharepoint-syntex/ba-p/1681139
- Added "Teams Rooms" to "Related Services": https://rooms.microsoft.com/
- Added "Web Content Filtering" to "Microsoft Defender for Endpoint": https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering
- Added "Endpoint DLP" to "Microsoft 365 E5 Information Protection & Governance": https://techcommunity.microsoft.com/t5/microsoft-security-and/announcing-microsoft-endpoint-dlp-general-availability/ba-p/1814010
- Corrected "Advanced Audit" placement back into "Office 365 E5" and out of "Microsoft 365 E5 eDiscovery & Audit": https://docs.microsoft.com/microsoft-365/compliance/advanced-audit
- Added "Microsoft 365 Business Basic" and "Microsoft 365 Business Standard" diagrams and comparison to "Microsoft 365 Business on a Page".
- Stopped referring to Windows in "Microsoft 365 Business Premium" as "Windows 10 Pro", as there are some small additions and one large additional benefit, namely "Windows Virtual Desktop".
- Added "Power Virtual Agents" to Related Services: https://powervirtualagents.microsoft.com/
- Added "AI Builder Capacity" to Related Services: https://docs.microsoft.com/ai-builder/overview
- Added "Campaign Views" to "Microsoft Defender for Office 365 Plan 2": https://docs.microsoft.com/microsoft-365/security/office-365-security/campaigns
- Added "Compromised User Detection" to "Microsoft Defender for Office 365 Plan 2": https://docs.microsoft.com/microsoft-365/security/office-365-security/address-compromised-users-quickly
- "Safe Documents" is now Generally Available (GA): https://techcommunity.microsoft.com/t5/microsoft-365-blog/safe-documents-is-generally-available/ba-p/1480401
- Removed "Group-Based Access Management" in "Azure AD Premium Plan 1" from the diagram as it is a low value feature and the space in the diagram is better used for a higher value feature.
- Added "Azure AD Password Protection" to "Azure AD Premium Plan 1": https://docs.microsoft.com/azure/active-directory/authentication/concept-password-ban-bad
- Updated "Advanced eDiscovery" link: https://docs.microsoft.com/microsoft-365/compliance/manage-legal-investigations
- Removed "Next Gen Protection" from "Microsoft Defender for Endpoint" as this was confusing and vague
- Added "Evaluation Lab" to "Microsoft Defender for Endpoint": https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab
- Added "MIP Integration" to "Microsoft Defender for Endpoint": https://www.microsoft.com/security/blog/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/
- Added "Cloud App Security Integration" to "Microsoft Defender for Endpoint": https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/threat-protection-integration#microsoft-cloud-app-security
- Added "Double Key Encryption" to "Information Protection & Governance": https://techcommunity.microsoft.com/t5/microsoft-security-and/announcing-public-preview-of-double-key-encryption-for-microsoft/ba-p/1534451
- Replaced "Microsoft Forms Pro" in the "Related Services" section as this has been replaced with a Dynamics 365 product "Dynamics 365 Customer Voice": https://dynamics.microsoft.com/customer-voice-transition/
- Added "Microsoft Dataverse for Teams" to Office 365 plans: https://docs.microsoft.com/powerapps/teams/overview-data-platform
- Added "Microsoft Dataverse" to the "Related Services" section: https://powerplatform.microsoft.com/dataverse/
- Added "Microsoft Teams Rooms" to the "Related Services" section: https://rooms.microsoft.com/
- Added "Universal Print" to "Windows E3", "Microsoft 365 Business Premium", and "Microsoft 365 F3": https://techcommunity.microsoft.com/t5/windows-it-pro-blog/announcing-the-public-preview-of-universal-print/ba-p/1534891
- Corrected "Direct Access" to "DirectAccess"
- Added "Always On VPN" to "Windows E3": https://docs.microsoft.com/windows-server/remote/remote-access/vpn/always-on-vpn/
- Replaced "Windows Analytics" with "Desktop Analytics" in Windows E3, Windows A3, and Microsoft 365 F3: https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview
- Updated the "Information Barriers" link: https://docs.microsoft.com/microsoftteams/information-barriers-in-teams
- Added "Microsoft Lists" to all plans that include "SharePoint Online": https://techcommunity.microsoft.com/t5/microsoft-365-blog/microsoft-lists-begins-general-availability-roll-out-to/ba-p/1524768
- Added "Bookings" to "Office 365 E3": https://support.microsoft.com/office/5382dc07-aaa5-45c9-8767-502333b214ce
- Added "InfoPath App" to "Office 365 E3": https://www.microsoft.com/download/details.aspx?id=48734
- Added "Endpoint Analytics" to "EMS E3": https://docs.microsoft.com/mem/analytics/overview
- Updated the "Privileged Identity Management" link to remove US-English forcing component: https://docs.microsoft.com/azure/active-directory/active-directory-privileged-identity-management-configure
- Updated link for "Phone System" to: https://docs.microsoft.com/MicrosoftTeams/what-is-phone-system-in-office-365
- Updated link for "Microsoft 365 E5 Compliance" to: https://www.microsoft.com/microsoft-365/business/e5-compliance
- Renamed "ML-Based Classification in Office 365 (preview)" to "Trainable Classifiers (preview)" to be consistent with majority of online documentation, and updated link: https://docs.microsoft.com/microsoft-365/compliance/classifier-learn-about
- Updated link for "Advanced Threat Analytics" to: https://docs.microsoft.com/advanced-threat-analytics/
- Renamed the "Comms Compliance" tile to "Comm Compliance" to align better with the true product name "Communication Compliance"
- Updated the link for "Microsoft Defender for Identity" to: https://www.microsoft.com/microsoft-365/security/identity-defender
- Renamed "Microsoft 365 Apps for Enterprise" in Education plans to "Microsoft 365 Apps for Education": https://docs.microsoft.com/deployoffice/device-based-licensing
- Added "Azure AD for Office 365" to "Microsoft 365 Education A1" in "EMS": https://azure.microsoft.com/pricing/details/active-directory/
- Added "(retiring)" to "Advanced Threat Analytics": https://docs.microsoft.com/advanced-threat-analytics/ata-versions
- Modified layout of "Related Services" in landscape views as there were too many items to fit in the old layout.
- Coloured "Related Services" tiles consistently across portrait and landscape views.
- Added "Microsoft Whiteboard" to Office 365 plans: https://support.microsoft.com/office/d236aef8-fcdf-4b5e-b5d7-7f157461e920
- Added "Microsoft To-Do" to Office 365 plans: https://support.microsoft.com/office/490c1a8c-2333-4952-8125-841afadb9620
- Added "Power Virtual Agents for Teams" to Office 365 plans: https://docs.microsoft.com/power-virtual-agents/teams/fundamentals-what-is-power-virtual-agents-teams
- Added "App Assure" to "Windows E3": https://docs.microsoft.com/fasttrack/products-and-capabilities#app-assure
- Added "Resilient File System (ReFS)" to "Windows E3" plans: https://docs.microsoft.com/windows-server/storage/refs/refs-overview
- Added "Persistent Memory" to "Windows E3": https://docs.microsoft.com/windows-server/storage/storage-spaces/deploy-pmem
- Added "SMB Direct" to "Windows E3": https://docs.microsoft.com/en-us/windows-server/storage/file-server/smb-direct
- Added "Unified Write Filter" to "Windows E3": https://docs.microsoft.com/windows-hardware/customize/enterprise/unified-write-filter
- Added "Windows Autopilot" to all Windows plans: https://docs.microsoft.com/windows/deployment/windows-autopilot/windows-autopilot
- Added "Application Control" to all Windows plans: https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control
- Added "Edge for Business" to all Windows plans: https://www.microsoft.com/edge/business
- Added "Windows Firewall" to all Windows plans: https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security
- Added "Block at First Sight" to "Microsoft Defender for Endpoint": https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus
- Added "Tamper Protection" to "Microsoft Defender for Endpoint": https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection
- Added "Azure AD External Identities" to "Related Services": https://azure.microsoft.com/pricing/details/active-directory/external-identities/
====================================
2020 / May:
- Repackaged "Microsoft 365 E5 Compliance" offerings to add "Insider Risk Management", "Information Protection & Governance", and "Discover & Respond" suites. Note that there is functionality that only resides in the suite SKUs and not inside the individual Office 365, EMS, or Windows 10 SKUs. These are known as "suite only" features. Customers that previously bought Microsoft 365 E5 licenses may need a zero-cost add-on to get suite only features.
- Renamed all F1 license types to F3 and added new "Microsoft 365 F1". Note: there is no Office 365 F1, only F3 now.
- Added "Information Barriers": https://docs.microsoft.com/microsoft-365/compliance/information-barriers
- Expanded "Office 365 ATP Plan 1" to show inclusion of "Safe Links", "Safe Attachments", and "Anti-Phishing".
- Added "Safe Documents" to "Microsoft E5 Security" as it is a feature of having both "Office 365 ATP" and "Microsoft Defender ATP".
- Removed "Office 365 Advanced Compliance" as this SKU is now retired.
- Changed "Supervision Policies" to superset "Comms Compliance".
- Changed "Data Loss Prevention for Teams" to "Teams Data Loss Prevention" for clarity, also known as "Communications DLP".
- Changed "Advanced Data Governance" to "Information Governance".
- Replaced "1 Year Audit Log Retention" with "Advanced Auditing".
- Changed "Azure Information Protection Plan 1" to "Information Protection".
- Changed "Azure Information Protection Plan 2" to "Rules-Based Classification (AIP client & scanner)".
- Changed "Azure Information Protection - Office 365" to "Information Protection (Office 365)".
- Renamed "Office 365 ProPlus" to "Microsoft 365 Apps for Enterprise" / "Microsoft 365 Apps for Business": https://docs.microsoft.com/deployoffice/name-change
- Added "Defender ATP for Windows Server" to "Additional Licensing".
- Replaced "Meeting Broadcast" with "Live Events".
- Added "retiring" to "Kaizala Pro" as the capabilities are being merged into Teams over time, leading to the eventual retirement of Kaizala.
- "Microsoft Cloud App Security" is now a feature of both "Microsoft 365 E5 Security" and "Microsoft 365 E5 Compliance" via "Microsoft 365 E5 Information Protection and Governance".
- Renamed "Microsoft 365 Business" to "Microsoft 365 Business Premium": https://www.microsoft.com/microsoft-365/blog/2020/03/30/new-microsoft-365-offerings-small-and-medium-sized-businesses/
- Replaced "Conditional Access with MFA" and "Self Service Password Reset" in "Microsoft 365 Business Premium" with full "Azure Active Directory Premium Plan 1": https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/azure-active-directory-premium-p1-is-coming-to-microsoft-365/ba-p/1275496
- Renamed "Office Mobile" to "Office Mobile Apps" and "Office Online" to "Office for the Web". Where this is compressed to one tile for space, the wording "Office Web & Mobile Apps" is used.
- Removed "Slices" and "Simple" tabs from Visio file to reduce ongoing workload in updating the diagrams.
- Various Alternate Text inclusions, improvements, and corrections.
- Various broken links fixed.
- Published separate PDF files again due to popular demand.
2020 / February:
- Moved Planner to F1 and above: https://techcommunity.microsoft.com/t5/Planner-Blog/Planner-is-coming-to-all-F1-commercial-plans-and-government/ba-p/835468
- Microsoft Flow renamed to Power Automate, link updated: https://aka.ms/flow-now-pa
- Microsoft PowerApps renamed to Microsoft Power Apps (with a space between 'Power' and 'Apps').
- Corrected MyAnalytics E3/E5 differences: https://docs.microsoft.com/office365/servicedescriptions/mya-service-description#myanalytics-distributions
- Updated Microsoft 365 F1 EMS rights and clarified that Microsoft 365 F1 Windows does not include KMS activation.
- Added Supervision Policies to Office 365 Advanced Compliance: https://docs.microsoft.com/office365/securitycompliance/supervision-policies
- Changed the labels for Windows Rights Management and Azure Rights Management to "Active Directory RMS" and "Azure RMS" respectively to reduce potential for confusion. This change is visible in license diagrams containing EMS E3.
- Added Self-Service Password Reset to Microsoft 365 Businesss EMS.
- Added "Exchange Online Archiving" in Microsoft 365 Business Office 365.
- Removed Outlook Customer Manager from Microsoft 365 and Office 365 Business plans. Retiring June 2020: https://support.office.com/article/1a421cb4-e8de-4b44-bfb8-710b92820439
- Removed Invoicing from Microsoft 365 and Office 365 Business plans. Retiring February 2020: https://docs.microsoft.com/dynamics365/invoicing/
- Renamed "Office Applications" to "Office 365 ProPlus" in Business plans to align with enterprise plan naming.
- Removed "Skype for Business Plan 2" from Business plans as since September no customer with less than 500 users is eligible for Skype for Business Online. This precludes all Business plans as they only support up to a maximum of 300 users.
- Skype for Business Online links in Enterprise plans now link to the service description to ensure customers have the latest information about the Skype for Business Online end of service: https://docs.microsoft.com/office365/servicedescriptions/skype-for-business-online-service-description/skype-for-business-online-service-description
- Fixed broken link in "PLC Groups" on Office 365 Education plans: https://www.microsoft.com/en-us/microsoft-365/blog/2016/06/20/professional-learning-community-groups-in-office-365-education/
- Added MFA to Conditional Access in Microsoft 365 Business: https://docs.microsoft.com/azure/active-directory/authentication/concept-mfa-licensing#available-versions-of-azure-multi-factor-authentication
- Added "Data Loss Prevention" and "Litigation Hold & eDiscovery" to Microsoft 365 Business: https://docs.microsoft.com/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-business-service-description
- Corrected Windows E5 "Threat & Vulnerability Management" link to: https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt
- Renamed "System Center Config Manager" to "Microsoft Endpoint Configuration Manager" and updated link: https://docs.microsoft.com/configmgr/core/understand/introduction
- Added "FastTrack" to the "Microsoft 365 Enterprise Benefits" panel.
- Updated "Microsoft Managed Desktop" description to call out that "Microsoft 365 E5 Security" is the minimum license required.
- Added "Insider Risk Management (preview)" to the Microsoft E5 Compliance plan. Note: This is not part of any Office 365, EMS, or Windows plan.
- Added "Azure Information Protection for Office 365" to Office 365 E3 plans and collapsed "Office Mobile" and "Office Online" into one tile to make room on the diagrams.
- Added "Office 365 Cloud App Security" to Office 365 E5 plans. There was some confusion because this was retired as a stand-alone SKU (I.E. you cannot buy it on its own, only as part of Office 365 E5), but I've confirmed it is still part of Office 365 E5.
- Updated all Exchange Online links to a plan comparison page as the old links just redirect to Plan 1 details.
- Replaced "Office 365 ATP Plan 2" feature "Threat Explorers" link, previous link is now broken.
- Replaced Office 365 "Advanced Data Governance" link, previous link now redirects to retention policy information.
- Replaced EMS "Microsoft Identity Manager" link, previous link now redirects to generic EMS page.
- Updated EMS "3rd Party MFA" link, previous link no longer reaches the correct anchor in the article.
- Added "Long Term Servicing Channel" to all Windows E3 diagrams.
- Collapsed Windows E3 references to "BitLocker" and "BitLocker to Go" into single "BitLocker & BitLocker to Go" tile to create space.
- Collapsed all references to Windows "Azure AD Join" and "Domain Join" into single "Azure AD & Domain Join" tile to create space.
- Corrected "User Experience Virtualisation" (UE-V) link, previous link was going to Windows Analytics.
- Settled on "Windows Defender Antivirus" instead of "Microsoft Defender Antivirus" when referring to the specific capability in the context of Windows licensing. "Microsoft Defender ATP" does not use the Windows naming because it grants benefits for usage on 3rd party operating systems (i.e. Mac OS).
- Replaced "Windows Defender Antivirus" link, previous link now redirects to generic Windows page.
- Added "Microsoft Desktop Optimization Pack (MDOP)" to rights not included in "Windows 10 E3 for Microsoft 365 F1", as per Microsoft Product Terms, January 2020.
- Changed references to Office 365 E3 "Audit Logging" to "Audit Logging & Alerting" to reflect the new alerting feature, except where a separate tile just for "Alert Policies" has been added to plans below Office 365 E3: https://docs.microsoft.com/microsoft-365/compliance/alert-policies
- Replaced "Office 365 ATP Plan 2" feature "Threat Investigation & Response" with "Automated Investigation & Response" to highlight the enhancements in this area, updated link.
- Added "1 Year Audit Log Retention" to "Office 365 Advanced Compliance".
- Renamed "Forms" to "Microsoft Forms" to highlight the product name and avoid confusion.
- Added "Microsoft Forms Pro" to "Additional Licensing" panel on Microsoft 365 Enterprise diagrams.
- Azure Active Directory Premium Plan 2 "Entitlement Management" is no longer in preview, it is now Generally Available.
- Added "Records Management" to "Office 365 Advanced Compliance" / "Office 365 E5" offerings.
- Collapsed separate PDF files down to a single file per license map type for simplicity and speed to publish.
- All PNG files are now exported directly from Visio at 300 DPI.
2019 / July:
-
Licensing Changes:
- Added Conditional Access to Microsoft 365 Business license maps.
- Added Multi-Geo to "additional licenses" panel of Enterprise license maps.
-
File Changes:
- Accessibility improvements to VSDX, PDF, and PPTX files, including more Alt Text.
- Reduced margins on Microsoft 365 Enterprise on a Page variants, making the license map fill the page more fully.
- Consolidation of Microsoft 365 Enterprise on a Page variants into single VSDX.
- Added Office 365 E1 -> E3 -> E5 license map.