"Every Agent Is a Seat Opportunity." Microsoft Just Told You Exactly Where This Is Heading.

What Rajesh Jha said about agent licensing isn't just a revenue prediction. It's a blueprint for where Microsoft's commercial model is heading, and a signal that every MSP needs to act on before their customers get there first.

Microsoft EVP Rajesh Jha recently made the commercial trajectory explicit. In a future where organisations deploy fleets of AI agents, those agents will need their own identities, their own access, and their own licensed footprint inside enterprise software systems. "All of those embodied agents are seat opportunities," he said. The pricing logic shifts from how many humans work here to how many active digital workers operate inside the organisation.

That future is closer than most partner conversations are treating it. E7 and Agent 365 go generally available on 1 May. The "Frontier Suite" is live. The question for every MSP and CSP is not whether this is coming. It is whether their customer estate is ready for it, and whether they know the answer before their customers start asking the competition.

(Most don't. That is the gap Softspend is built to close.)

The security foundation is the prerequisite, not the afterthought

Agent 365 is not a standalone capability. It is a governance surface that extends four existing Microsoft management planes to the agent dimension. M365 Admin Centre for registry and observability. Entra for agent identity and conditional access. Defender for threat detection and runtime defence. Purview for data compliance and audit logging.

This means that an organisation's readiness to govern agents is a direct function of how well its existing Defender, Purview, and Entra estate is configured. Conditional Access for Agents builds on Conditional Access for users. ID Protection for Agents requires Entra P2. DLP for Agents requires Purview DLP to already be in scope. Sensitivity labels, compliance policies, and identity governance are not agent features. They are agent prerequisites.

The security posture question that matters right now is not "have you deployed agents." It is "is your Microsoft 365 security foundation configured well enough to govern the agents you already have, and the ones you are about to deploy." For most tenants, the honest answer is partial at best. We explored the underlying economics of why E5 has become the enterprise security baseline in Framework Economics: How Zero Trust Makes E5 the New Baseline.

The scale problem MSPs are not yet solving

A single tenant assessment is a consulting engagement. Assessing readiness across a fleet of fifty or a hundred managed tenants is a major scalability problem. Manually reviewing Defender configurations, Purview policy coverage, Entra identity governance, and Conditional Access posture across an entire CSP book is not a practical motion. It is the reason most MSPs are having licensing conversations rather than readiness conversations.

Softspend solves this at fleet scale. With one-click assessments across the tenant estate, the Copilot Readiness Assessment evaluates security posture across Defender, Purview, and Entra automatically, per tenant, across all tenants. Framework-led assessments aligned to CIS Microsoft 365 controls and Microsoft's own Copilot readiness and Secure Score frameworks give every finding a defensible standard rather than a subjective judgement call.

The output is not a spreadsheet. It is a readiness score per tenant, with feature-level visibility into what is configured, what is not, and what licence upgrade is required to close the gap. E7 readiness, Agent 365 readiness, Copilot readiness, mapped against every tenant in the fleet, available on demand, updated continuously.

What E7 readiness actually looks like in practice

E7 bundles E5, Entra Suite, Copilot, and Agent 365 at $99 per user per month, saving approximately $18 versus standalone components. The bundle case is straightforward. The readiness case is more nuanced.

A tenant on E3 with weak Conditional Access coverage, ungoverned external sharing in SharePoint, and no sensitivity labelling is not E7-ready in any meaningful sense. The licence upgrade is the easy part of that conversation. The configuration remediation is the advisory engagement. The MSPs who arrive at renewal knowing exactly where each tenant sits, which controls are in place, which are missing, which require licence uplift versus configuration work, are having a fundamentally different commercial conversation than those arriving with a price comparison.

Softspend surfaces that distinction automatically. For each tenant, the Copilot Readiness Assessment identifies the security posture gap, maps it to the relevant Microsoft control framework, and quantifies the licensing delta. The MSP walks into the renewal conversation with the analysis already done.

The same logic applies in SMB

Microsoft 365 Copilot Business is expanding AI to organisations under 300 users. Defender for Business Premium provides the SMB security layer, offering endpoint protection, identity, and basic compliance coverage at a price point that fits the segment.

The readiness question is identical. An SMB tenant on Microsoft 365 Business Premium needs the same assessment of its security configuration before it can govern agents effectively. The controls are different, Defender for Business rather than Defender for Endpoint P2, Business Premium rather than E5, but the gap between licensed and configured is just as common, and just as commercially relevant.

For MSPs serving predominantly SMB customers, fleet-scale readiness assessment across Business Premium tenants is the same motion as enterprise E5 assessment. Softspend covers both. The assessment surfaces what is configured, what is missing, and what the path to Copilot and agent readiness looks like, per tenant, across the SMB fleet, with the same one-click consent model using Microsoft 365 authentication you already use.

The trajectory: from assisted to autonomous

The current GA model is deliberately conservative. Agents act on behalf of (OBO) licensed human users. Licensing obligations attach to the human, not the agent. That is the right starting point for a market that is still building governance muscle. We can do one-click assessments right now, identify current state Copilot readiness, and put optimised suite bundles in front of your customers in minutes.

But this is not the destination.

An agent that perpetually borrows a human user's identity, permissions, and license has a ceiling. It cannot act independently, hold its own data access policies, or operate outside the scope of its human sponsor. That model works for assisted workflows. It breaks down for persistent, autonomous agents operating continuously at scale.

The logical endpoint is that the most capable autonomous agents will carry their own Entra identity, their own scoped access to the Microsoft 365 stack, and their own Defender and Purview policy assignments governing what data they can access, process, and act on. Not a borrowed identity. Not inherited permissions. A discrete, governed digital worker with a license that reflects its actual footprint in the organisation.

The infrastructure for this already exists. Entra Workload Identities, bundled in the E7 stack, provides the identity and lifecycle management layer also for non-human principals. Conditional Access for Agents and ID Protection for Agents, currently in Preview, extend the same risk-based access controls to agent identities. The components are present. The licensing model for autonomous agents has not yet fully caught up with the architecture.

When it does, the organisations that scale with confidence will be the ones whose security foundation was in order before the agents arrived. The MSPs and CSPs who can demonstrate that readiness, at fleet scale, with evidence rather than estimates, will be the ones their customers trust to lead that conversation.

Average revenue per user has been the commercial model for a decade. Average revenue per agent (ARPA), a shift predicted by Tony Mackelworth at Softspend, is the model being built right now. We explored the full commercial implications in Microsoft's Licensing Evolution: From ARPU to ARPA. The governance gap between those two states is where the partner opportunity sits.

Softspend maps it. Across every tenant. Before the renewal arrives.

Are you assessing Copilot and agent readiness across your tenant fleet today, or waiting for customers to ask? Drop your approach in the comments.

#Microsoft365 #Agent365 #MicrosoftE7 #CopilotReadiness #MSP #CSP #MicrosoftPartners #AIGovernance #ZeroTrust #Defender #Purview #Entra #Softspend #LicensingIntelligence

Key Takeaways

Microsoft's Frontier Suite goes live 1 May 2026, bundling E5, Entra Suite, Copilot, and Agent 365 at $99 per user per month. This article examines what agent readiness actually requires across Defender, Purview, and Entra, why most MSP tenant fleets are not yet configured to govern agents, and how Softspend's fleet-scale Copilot Readiness Assessment closes that gap automatically across the entire CSP book.

Key Facts

• Microsoft EVP Rajesh Jha: "All of those embodied agents are seat opportunities"
• E7 GA: 1 May 2026 at $99/user/month, saving $18 vs standalone components
• Agent 365 available as standalone add-on at $15/user/month
• Entra Suite available as standalone add-on at $12/user/month
• 80% of Fortune 500 already running Microsoft agents
• IDC predicts 1.3 billion agents in circulation by 2028
• Most Agent 365 security features are Preview at GA, not generally available
• Agents at GA do not require their own licenses — OBO model covers them under the human user seat
• Autonomous persistent agents with their own Entra identity remain in Frontier preview
• 60% of CSP partner revenue is now tied to value-added services (Omdia, Dec 2025)

Sources

• https://blogs.microsoft.com/blog/2026/04/21/accelerating-frontier-transformation-with-microsoft-partners/
• https://dnyuz.com/2026/04/10/microsoft-exec-suggests-ai-agents-will-need-to-buy-software-licenses-just-like-employees/
• https://www.microsoft.com/licensing/faqs/122
• https://learn.microsoft.com/en-us/microsoft-agent-365/overview
• https://samexpert.com/agent-365/
• https://aka.ms/A365Partner
• https://softspend.com/community/post/microsoft-licensing-evolution-arpu-arpa-agent-economy
• https://softspend.com/community/post/framework-economics-zero-trust-e5-enterprise-baseline