Microsoft's FY27 Strategy: Decoded for Microsoft 365 Partners

Microsoft has spent three fiscal years rearchitecting its partner model towards growth. In FY27 Microsoft committed to the transition, with an aligned GTM framework, aligned suite architecture, the incentive rate card and the funding programmes now all point to one goal: move tenants up the Microsoft 365 stack, and get paid for the movement rather than for holding the account.

Microsoft is steering partners toward six strategic workload conversations across the book: Microsoft Entra ID, Microsoft Defender, Microsoft Purview, Microsoft Intune, Microsoft 365 Copilot and Microsoft Agent 365. Not every tenant needs all six immediately, but every tenant should now be assessed against them.

Short version

- A flat indirect reseller book now earns materially less than it did. Flat Microsoft 365 Business Standard and legacy Office 365 run-rate no longer have a Microsoft 365 Core lever for indirect resellers. Microsoft 365 Business Premium still earns through Strategic Tier 1, but the old Core subsidy is gone.
- The same customer book earns more when strategic security workloads are attached. FY27 pays for the upgrade motion, not for passively holding the account.
- Core is the secure foundation: Microsoft Entra ID, Microsoft Defender, Microsoft Purview and Microsoft Intune licensed, configured and used. Frontier is the AI layer that sits on top: Microsoft 365 Copilot, Microsoft Agent 365, Copilot Studio and agentic solutions.
- Enterprise and SMB follow the same pattern, but not the same packaging. Enterprise moves through Microsoft 365 E3, Microsoft 365 E5 and Microsoft 365 E7. SMB moves through Microsoft 365 Business Standard, Microsoft 365 Business Premium, Microsoft Defender Suite for Business Premium, Microsoft Purview Suite for Business Premium and Microsoft 365 Copilot Business.
- The enterprise upgrade motion is Microsoft 365 E3 at $39, Microsoft 365 E5 at $60 and Microsoft 365 E7 at $99, subject to current commercial price list validation. Each rung increases the plan depth across identity, security, compliance, endpoint management, Copilot and agent governance.
- The SMB upgrade motion is Microsoft 365 Business Standard at $14, Microsoft 365 Business Premium at $22, then Microsoft Defender and Microsoft Purview suite attach where the security and governance gaps justify it. The SMB suite attach is not the same as Microsoft 365 E5, but it is the practical SMB analogue of the E3 to E5 security conversation.
- Microsoft 365 E7 became generally available in FY27 planning materials as the new enterprise top tier. It packages Microsoft 365 E5 with Microsoft 365 Copilot, Microsoft Entra Suite and Microsoft Agent 365. Validate availability, Teams variants and pricing in Partner Center before quoting.
- The SMB Copilot bundles did not simply expire with the early promotional period. Microsoft 365 Business Standard with Copilot and Microsoft 365 Business Premium with Copilot are now standing SMB bundle positions, subject to Microsoft’s current price list and promotion terms.
- Microsoft Agent 365 does not require Microsoft 365 E5 in every case. It requires a qualifying security foundation. Microsoft 365 E5 is the cleanest enterprise route, but Microsoft 365 Business Premium and qualifying Microsoft Defender and Microsoft Purview suite pairings are also part of the prerequisite conversation where Product Terms confirm the scenario.
- Growth margin is separate from Microsoft Commerce Incentives. Treat the October 2026 growth margin mechanics, including thresholds, mix tests, pass-through and stacking, as items to verify with Microsoft or your distributor before quoting. The FY27 rate is unavailable in the funding guide and should not be estimated.
- Microsoft has announced two FY27 recognition paths: the Agentic Partner Capability Score and the Frontier Partner Specialization. They sit at different depths. The first is a capability-score route. The second is a high-bar specialization route with prerequisite specializations, skilling and audit.
- The partner money is increasingly in services. Microsoft incentives can help fund the motion, but the durable margin is in assessment, remediation, deployment, adoption and managed services.

What standing still now costs

Indirect reseller, 1,000 seats. CSP Strategic Tier 1 is a flat global rate in FY27; market bands matter for funded engagement payments, not for the Microsoft 365 Strategic Tier 1 percentage:-

[Note: The $33,600 example assumes the $15 security-stack attach is qualifying tenant-level year-on-year growth, with no offset from another partner, direct customer purchase, Enterprise Agreement decline or other revenue movement in the same solution area. If the tenant-level baseline does not show qualifying growth, the Growth Accelerator component does not pay]

The worst-hit book earns nothing. Flat Business Standard and Office 365 run-rate was never strategic, so it only ever earned core. With the reseller core rebate retired it now sits outside every lever. Two options per tenant: an upgrade plan into the strategic set, or a service price that no longer assumes the old rebate.

The pay for holding fell by roughly two thirds. Same book, same customers, same work. The core rebate quietly subsidised managed service margins for years, and that subsidy has ended.

The same book with the security stack attached earns more than it did under FY26. That is the whole design in one line: FY27 pays for the upgrade, not for the relationship.

Core, then Frontier

Microsoft groups everything it wants partners to sell into two lanes. Core is the secure foundation: Microsoft Entra ID, Microsoft Defender, Microsoft Purview and Microsoft Intune licensed, configured and used. Frontier is the AI layer that sits on top: Microsoft 365 Copilot in the flow of work, and agents performing defined tasks under governance. Frontier is the AI that runs on top of it: Copilot and agents expose the quality of the tenant’s identity, sharing, data protection, endpoint and governance posture. Closing that gap is the partners product and services they bring to market.

Microsoft publishes guidance on these conversations with clients. However, It does not publish the mapping from each conversation to the licensing that delivers it and the work you get paid for. That mapping is below, so softspend have made it actionable for your team:

The enterprise and corporate version

The SMB version, for organisations below 300 seats

Four sales conversations, all of them selling from the Microsoft 365 stack you already resell.

Secure the tenant first. Nothing on the AI side sells without a secure foundation.

The sequencing holds at both SMB and Enterprise clients. Frontier does not sell without Core underneath it, and Microsoft's own FY26 retrospective says so plainly: AI adoption is outpacing readiness. That gap is the partner's product. Every Copilot conversation creates a Core remediation project.

The enterprise stack

Three suites at escalating prices. The prices are the least interesting part of the table below, because what actually changes between the rungs is the plan level on the same six workloads.

Microsoft 365 E7 is the new enterprise top-tier position above Microsoft 365 E5. At $99, it is intended to package Microsoft 365 E5 with Microsoft 365 Copilot, Microsoft Entra Suite and Microsoft Agent 365 at a lower combined price than buying those components separately

At enterprise scale, Microsoft 365 E5 is the cleanest foundation for the Frontier conversation. It gives the customer the Microsoft Entra ID P2, Microsoft Defender and Microsoft Purview depth that Copilot, agent governance and advanced security discussions tend to require. It is not the only possible Agent 365 prerequisite route, but it is the simplest enterprise route to explain and defend.

The SMB upsell pathway

This is the upgrade pathway most MSPs actually work with day to day, and it gets far less coverage than the enterprise conversation. Arguably there has never been a better time to position upgrades in the SMB market.

Three things worth pulling out of that table.

Microsoft 365 Business Standard is not a security position. It gives the customer productivity apps and baseline email protection, but it does not provide Conditional Access, Microsoft Intune device management or the same data protection foundation as Microsoft 365 Business Premium. Every Business Standard tenant in the book is now an upgrade conversation, and after the FY27 rate changes it earns very little to leave alone. Microsoft Defender and Microsoft Purview suite attach is the SMB version of the security and governance upsell. It is not equivalent to Microsoft 365 E5. It strengthens the Microsoft Defender and Microsoft Purview layers, but it does not automatically add Microsoft Entra ID P2. If the customer needs risk-based Conditional Access, Microsoft Entra ID Protection, Privileged Identity Management or advanced identity governance, price Microsoft Entra ID P2 or Microsoft Entra Suite separately. Agent governance is reachable from Microsoft 365 Business Premium where Product Terms confirm the qualifying foundation. An SMB customer does not automatically have to move to Microsoft 365 E5 to start the Microsoft Agent 365 conversation, but you still need to validate the prerequisite position and the specific Agent 365 capabilities required before quoting.

Copilot is now a base SKU in the SMB line-up

This is the change most likely to be missed, because it looks like an expiry.

Through the first half of 2026 Microsoft ran heavy discounts on Copilot bundled with the SMB base plans, and those promotions carried a 30 June 2026 end date. They did not lapse. On 1 July 2026 the bundled versions became standing products at the same effective price.

Business Standard with Copilot is the entry point. There are three positions worth knowing, and they are not equivalent for you.

All available to new and existing customers, 1 to 300 seats, on annual commitment.

Lead with the $32 Premium bundle. It lands the security baseline and AI in one transaction, and it is the only route that puts Copilot on a tenant that already has Conditional Access, device management and data classification foundation underneath it.

The commercial argument for you is not the customer's saving. It is that both halves of that SKU sit in the strategic set, the deal moves the tenant's mix ratio in the direction growth margin rewards, and the security position it creates is the thing that makes the Copilot deployment defensible at the first review.

Conversely, Business Standard with Copilot puts Copilot on an estate with no Conditional Access and no data classification. This licensing bundle turns an existing oversharing problem into a visible one.

Additionally, the standalone Copilot Business add-on remains available at $21 per user per month for organisations under 300 users, with roughly 15% off a one-year subscription for 1 to 300 licences running through 31 December 2026.

Two new Copilot Trials

These get discussed interchangeably and they create opposite problems.

Copilot in 30 launched on 1 August 2026. It is partner-delivered: a 30-day Microsoft 365 Copilot Business trial for up to 25 users, with a defined conversion-to-paid path and new reseller activation incentives behind it. Eligibility is a qualifying Microsoft 365 Business subscription, meaning Business Basic, Business Standard or Business Premium. You choose the tenant, so you can check readiness before the clock starts.

The Low Friction Trial (LFT) is the reactive play. An eligible end user can start Copilot themselves, on by default, without an admin purchase decision. Demand is bottom-up, and you may only find out after the governance questions start getting asked by your clients. We covered that shift and the debt it creates in Microsoft Just Made Copilot Free to Start. The Bill Is Governance.

Either way, 25 seats land Copilot on a tenant whose Conditional Access, sharing defaults and data classification you may never have audited. We recommend to start the readiness check before the clock starts, and convert it.

An SMB Agent 365 entry point

Microsoft Agent 365 is widely misunderstood because early partner messaging was presented as “Microsoft 365 E5 required”. The more accurate position is that Microsoft Agent 365 requires a qualifying security foundation.

From 1 June 2026, new Microsoft Agent 365 purchases should be checked against the qualifying prerequisite list in Product Terms. Microsoft 365 E5 is the cleanest enterprise foundation, but Microsoft 365 Business Premium and qualifying Microsoft Defender and Microsoft Purview suite pairings are also part of the prerequisite conversation where Product Terms confirm the scenario.

Microsoft 365 E7 is unaffected by this issue because it packages Microsoft 365 E5, Microsoft 365 Copilot, Microsoft Entra Suite and Microsoft Agent 365 together.

The practical consequence is important: agent governance can start from an SMB customer where the qualifying security foundation is in place. A partner who reads the original “E5 required” headline too narrowly risks excluding their Microsoft 365 Business Premium base from the agent governance conversation.

Microsoft Agent 365 is the control plane for observing, governing, managing and securing agents. It does not stand on its own. The governance model depends on the controls underneath it: Microsoft Entra ID for identity and access, Microsoft Defender for protection and detection, and Microsoft Purview for data governance and compliance.

That is the logic behind the prerequisite. Microsoft is no longer simply gating a feature for commercial reasons. It is requiring a security and governance foundation because agent control depends on identity, threat protection and data protection being in place.

Do not assume every customer running agents already qualifies. Every customer running agents should be assessed against the Microsoft Agent 365 prerequisite list, the required security foundation and the specific capabilities they expect Microsoft Agent 365 to provide.

Microsoft’s wording is also worth handling carefully: customers without a qualifying position may not have access to certain Microsoft Agent 365 capabilities. That is softer than a universal hard block, so verify the Product Terms and the Softspend platform before quoting.

FY27 Partner Recognitions

Microsoft has announced two new partner recognitions for FY27. They sit at different depths. One accelerates the points that earn a designation. The other is a 'top tier' specialisation with a third-party audit behind it.

Both are scheduled to arrive during FY27. The Frontier Partner Specialization opens for enrolment later in the year. The Agentic Partner Capability Score has been announced.

Microsoft's SMB partner content labels the capability score "for SMB focused partners" and the specialisation "for services and channel partners," which has been widely read as a segment rule. However, the programme material does not support that reading. The Agentic Partner Capability Score was announced as an "AI Cloud Partner Program" update, open to eligible partners who can demonstrate agent build and delivery capability, with no published segment restriction.

The update is better read as guidance on what is realistically attainable rather than as an eligibility gate. However, the practical outcome is much the same either way, because the Frontier Partner Specialization requires an Azure specialisation, three DP-600 holders and a third-party audit, which puts it out of reach for most SMB practices on capability grounds rather than on segment grounds.

Do not assume you are excluded from the capability score because of the customers you serve.

The Agentic Partner Capability Score looks like a badge, but it is better understood as a capability-score accelerator. Partner Capability Score is one of the mechanisms Microsoft uses to award Solutions Partner designations. In FY27, that matters because designations remain a key eligibility signal for incentives, funded engagements and customer credibility. For CSP indirect resellers, Microsoft also recognises a 25-point capability-score route for CSP transaction incentive eligibility in the relevant solution area.

Get your Frontier badge now

Two things share a name here, and it is worth separating them before anyone reads the requirements below and gives up.

The Frontier Partner badge already exists, and partners already hold it. Its entry bar is three Solutions Partner designations (SPD): Modern Work or Business Applications, Security, and a Cloud and AI Platform-aligned designation, plus three specialisations: Microsoft 365 Copilot, Data Security, and one of AI Apps on Microsoft Azure, AI Platform on Microsoft Azure or Accelerate Developer Productivity.

That badge is is evolving into the Frontier Partner Specialization. If the question is whether any of this is reachable from where you sit today, the badge is the near-term answer to get started.

Next Up: Frontier Partner Specialization

Three components must be met at the same time, under the same Partner Global Account:

• Four prerequisite specialisations: Microsoft 365 Copilot, AI Apps on Microsoft Azure or AI Platform on Microsoft Azure, Data Security, and Identity and Access Management.

• Skilling: five people must hold the "Frontier Transformation Engineer" badge, and three people must hold "Fabric Analytics Engineer Associate" (DP-600). They can be the same people or different ones.

• Audit: a third-party audit validating delivery capability across design, build, deploy, govern, secure and operate, on a two-year cadence.

The "Frontier Transformation Engineer" badge underneath it validates building agents across Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, GitHub Copilot, Microsoft Fabric and Microsoft Agent 365, and is earned through certifications, advanced training and project-ready execution rather than an exam alone. An incredible achievement for your team members.

Note: what the prerequisite list does to a pure Microsoft 365 practice. 2 of 4 pre-requisites : Data Security and Identity and Access Management, sit squarely in your stack. 1 of 4, Microsoft 365 Copilot, is the motion you are already selling. The 4th, pushes into Azure, and the DP-600 requirement pushes into Fabric.

On the stated requirements, the Frontier specialisation is not reachable from a Microsoft 365 practice alone. That is a strategy decision rather than a skilling one.

The specialisations behind your motion

"Select Modern Work or Security specialisations" will often turns up as the eligibility line on the Microsoft funded pre-sales engagements. For a practice built on Microsoft 365 security and Copilot, that resolves to a short and specific list, and each one sits behind a pathway you are already selling.

Please note: Microsoft 365 Business Premium-level Microsoft Defender and Microsoft Purview capability is not the same as Microsoft Defender Suite, Microsoft Purview Suite or Microsoft 365 E5 compliance capability. Read the SMB column as a starting position rather than an equivalent.

"Data Security" was formerly Information Protection and Governance, and "Secure AI Productivity" was formerly Teamwork Deployment. "Modernize Endpoints" covers the Intune pathway if you sell it. Adoption and Change Management has been retired, with adoption capability now assessed inside the product-aligned specialisations instead.

Modern Work and Security each cap product benefits at three specialisations, so a fourth in the same solution area earns no additional product benefits. Azure caps at five. The cap applies to product benefits only: a fourth specialisation still counts for engagement eligibility and co-sell positioning.

Specialisation Criteria

four gates, sometimes five:

These are not certification exercises. Every specialisation is gated on several things at once:

• Eligibility, the aligned Solutions Partner designation (SPD) for that solution area.

• Performance, a threshold measured from customer telemetry rather than from your claims. For the Microsoft 365 Copilot specialisation this is now paid "Microsoft 365 Copilot monthly active usage", which is deployment reality rather than seats sold.

• Skilling, meaning the Microsoft-published certification, applied-skills or badge requirements held by the required number of named people. Certification lists change, so validate the current requirements before building a hiring or exam plan around them.

• Validation, which may mean customer evidence or third-party audit depending on the specialization and timing. Microsoft 365 Copilot, Azure-aligned specializations and the Security specialization family are moving more clearly toward independent validation, so budget for audit cost and preparation where Microsoft requires it.

• Marketplace A fifth pillar now applies where the specialisation calls for it. Some newer specializations require a published Microsoft Marketplace offer tagged to the relevant products. Treat this as a 'fifth gate' only where Microsoft’s specialization rules require it.
  

That performance gate is the part that catches practices out. You cannot certify your way into a specialisation on a book that is not deploying, which means the specialisation and the upgrade motion have to be built at the same time. Softspend can help you build that advisory pipeline and costed upgrade proposals to close the gap.

Impact on Pre-sales

This is where partner commentary diverges, and the answer turns out to depend on which tier of programme you are nominating.

This is where partner commentary often diverges, because the answer depends on which FY27 programme you are nominating.

At enterprise scale, assume select Modern Work or Security specializations may be required. FY27 funded engagements such as "Frontier Accelerate Security: Envisioning & POC", "Frontier Accelerate Security deployment accelerators" and related conversion motions can carry specialization, performance and Partner Performance Accountability requirements as well as customer eligibility rules.

At SMB scale, check the named accelerator rather than assuming the enterprise rule applies. The SMB Business Premium deployment motion and the Business Premium Defender/Purview suite motion are separately named programmes, and some SMB variants are designation-gated rather than specialization-gated.

The practical rule is this: at enterprise scale, assume specialization may be required; at SMB scale, check the specific accelerator, because the relevant Solutions Partner designation may be enough. Either way, specialization changes the commercial conversation. A partner with the relevant specialization can often nominate Microsoft-funded work that another partner has to price itself.

In FY27, use the new Frontier Accelerate names: Frontier Accelerate Security: Envisioning & POC, Frontier Accelerate Security: CSP Defender/Purview Deployment Accelerator, and Frontier Accelerate Security: CSP ME5/ME7 Deployment Accelerator.

What unlocks what

It is worth being precise here, because two different credentials are routinely confused and they open different pots of money.

Two things follow from that table.
The Solutions Partner designation, or the recognised 25-point capability-score route for indirect resellers, can satisfy a key partner eligibility gate for CSP transaction incentives. It does not guarantee earnings. Earnings still depend on eligible products, customer eligibility, revenue classification, Partner of Record, trailing twelve-month revenue, Change of Channel Partner status and programme caps. Specialization matters most where Microsoft requires proof of advanced delivery capability. A partner with the relevant Data Security, Threat Protection, Identity and Access Management, Cloud Security or Microsoft 365 Copilot specialization may be able to nominate funded pre-sales, readiness or deployment work that another partner has to price itself. The customer seat minimums, licensing prerequisites, Proof of Execution rules and engagement-specific gates still apply. That brings the recognitions back into focus. An accelerator on capability points moves a partner toward designation or capability-score eligibility. That is a real commercial lever. It is not, by itself, a rebate.

The money moves from promotions to margin

There are promotions running now, and they are worth using, but do not build the whole FY27 plan around promotional pricing. Promotions are temporary customer discounts. Margin is the gap between buy price and sell price. Microsoft Commerce Incentives are paid after billing through rebate and co-op. Growth margin is a separate margin construct, not an MCI incentive.

Microsoft has signalled an October 2026 margin shift on strategic Microsoft 365 products and a base-margin reduction on selected legacy products. Treat the detailed growth-margin mechanics, including seat thresholds, mix tests, pass-through, stacking and lock-in rules, as items to verify with Microsoft or your distributor before quoting.

Current guidance should be stated plainly: FY27 growth margin rates and final mechanics are not publicly available in the funding guide, so verify with Microsoft.

Eligibility is assessed at tenant level across every channel and partner, so "new to offer" means new to the customer rather than new to you, and nothing in your CRM will automatically tell you that unless you have the tenant connected by a platform like softspend.

And eligibility locks at the time of sale, with no true-up and no retrospective claim. A Defender Suite deal quoted at 280 seats instead of 300 is a permanent margin decision made in pre-sales and underwrites the value in a standardised proposals.

What actually changes on 1 October

Two things happen on the same day:

The legacy book becomes less profitable to hold on the same day the strategic book becomes more profitable to grow. That is the compelling event. A partner who does nothing between now and October ends the quarter earning less on the same customers.

For an SMB accounts, the 'growth margin' is not eligible as a top-up. That makes the licensing upgrade motion, the co-op fund and the MCI deployment fees more important for SMB partners. This is where softspend can help scale your advisory engagements and drive the upgrade proposals across your book.

Put it next to the FY27 rate card: flat Microsoft 365 Business Standard and legacy Office 365 run-rate already earn an indirect reseller nothing under the retired Core lever. If the expected base-margin reduction applies to the same legacy book from October, the commercial case for upgrade becomes stronger. Verify the exact margin impact with your distributor before committing a forecast.

Accordingly, every tenant sitting on a legacy SKU is now a decision with a date on it: an upgrade plan, or a services price that no longer assumes the old margin.

One caveat worth checking, we understand that the growth margin passes through the distributor and direct bill tier. If you are an indirect reseller, what actually reaches you depends on what your distributor passes through and at what rate. That is a question to ask in writing before you build a plan on it.

The growth definition that catches people out

Growth is measured at the customer tenant, against all prior-year revenue in that tenant and solution area, regardless of which partner earned it or whether it came through a lapsed Enterprise Agreement (EA).

The practical consequence: a genuinely new sale does not automatically register as growth. If revenue from another partner in the same tenant declines while yours rises, the decline can offset your gain. Revenue that simply moves between channels without creating net new spend is not growth at all. Visibility at tenant level is recommended.

If your FY27 targets were built on new logos and expanding accounts, they may not be measuring what Microsoft will pay you on.

Services Upsell

Source: Forrester Total Economic Impact partner opportunity analyses commissioned by Microsoft, 2025 and 2026.

The ratio underneath those numbers matters more than the numbers. Roughly 30% margin on a licence against 60% to 70% on services is the difference between a reselling business and an advisory one, and FY27 has removed most of what used to subsidise traditional resellers.

Around 40% of CSP incentive is paid as co-op, which is a marketing fund you claim against approved activity rather than straight cash. That is available budget for the pre-sales work that finds deals in the first place, and most partners under-claim it (its a use it or lose it model).

Where the money sits across the deal lifecycle

It helps to separate the motion into stages, because each one is funded differently and most partners work two of them while paying for the other two out of their own margin.

Stage 03 is where the commercial structure is fixed. Licence margin is realised through buy/sell economics. CSP transaction incentives are earned later through Microsoft Commerce Incentives, subject to eligibility, revenue classification and caps. Any October growth margin should be modelled separately as a margin construct, not as MCI.

Microsoft Funding (MCI versus Co-Op)

Co-op is contingent and must be claimed. For Microsoft 365 CSP transaction incentives, the earning split is generally 60% rebate and 40% co-op. The co-op portion requires the dollar threshold, approved activity, Proof of Execution and claim submission inside the relevant window. It is not guaranteed cash, and unclaimed eligible co-op can be forfeited (use it or lost it).

MCI activity funding is a fixed fee Microsoft pays for a qualifying completed client engagement. You nominate before you start, the customer and partner gates must be met, Proof of Execution is required, and size minimums apply. (Softspend can automatically map MCI funding to your clients, and provide client reports to support proof of execution)

Fees shown at Market A, which includes the UK. Markets B and C pay 75% and 50%.

What you can claim now.

Worth pulling out separately, because it is the part most partners assume is closed to them.

Co-Op is available to you right now. Any CSP partner accruing on CSP sales earns it, at any client size, with no specialisation and nothing that has to be deployed. The only gate is your own $10,000 semesterly balance. That funds the demand campaign, the client briefings at around $750 each, the sales skilling and the proof-of-value work.

Business Premium Incentives via your Solution Partner designations

Business Premium-related FY27 incentives split into separate motions. The AI-Ready Productivity: CSP Business Premium Deployment Accelerator is tied to incremental Microsoft 365 Business Premium seats and the Modern Work designation gate. The Security: CSP Business Premium Defender/Purview Deployment Accelerator is tied to qualifying Microsoft Defender and Microsoft Purview for Business Premium suite deployment and the Security designation gate. Where both qualify, the funded engagement value can reach $4,000 before any conditional conversion bonus. Do not assume both apply to every 50-seat Business Premium deal. The conversion bonuses are separate and conditional. The productivity conversion bonus is tied to Google Workspace displacement. The security conversion bonus is tied to the relevant security competitor displacement under the Security programme. Each depends on its own parent Deployment Accelerator, same-tenant and same-partner rules, timing, Proof of Execution and competitor evidence.

One activity, one funding source. Work Microsoft pays for under MCI cannot also be claimed from co-op.

Over 300 seats for MCI-funded pre-sales. The MCI envisioning engagements carry a 300 seat floor, so in SMB the readout runs as a co-op client briefing or proof of value instead. The deployment money is still MCI.

Take advantage of your Solution Partner designation. The SMB Business Premium accelerator gates on an active "Modern Work" designation for the deployment and a "Security" designation for the suites. Those are designations, not specialisations, which means most established partners can claim that stack today.

The pre-sales engagements are the ones that need a specialisation: the security workshop needs one of "Cloud Security", "Identity and Access Management", "Threat Protection" or "Data Security", and the "Copilot advisory" needs the Copilot specialisation, which becomes mandatory from 1 January 2027.

That is the practical case for treating the assessment as the 'front door' rather than as overhead.

Get on Marketplace

"Frontier Accelerate for Marketplace" arrives in September 2026 and folds ISV Success, Marketplace Rewards, Azure IP co-sell and certified software designations into one experience, across three stages: build and publish, grow sales, and differentiate. The headline benefits are Azure sponsorships up to $30K, $400K and $2M by stage, MACC decrement for your end-customers.

Most of that is an ISV motion rather than Microsoft 365 services. The part that matters to everyone is less known: co-sell recognition is moving to a Marketplace-first model, with Marketplace billed sales becoming the primary auditable way partner impact on a deal gets recognised. If you have IP of any kind, a managed service wrapper or a packaged assessment, listing it stops being a side project.

What to do now

• Inventory the six strategic workloads. For every tenant, record the plan level and activation state of Entra, Defender, Purview, Intune, Copilot and Agent 365 wiht softspend. That table is your FY27 pipeline.

• Treat every Business Standard tenant as an upgrade conversation. It carries no Conditional Access, no device management and no data classification, and it now earns you very little to leave alone. Use Softspend to identify all Business Standard tenants, and do '1 Click' upgrade proposals.

• Lead SMB Copilot with the Business Premium bundle at $32. It costs less than buying the parts and it lands the customer on the security baseline at the same time. Use Softspend to automatically provide an upgrade proposal, with optimum bundles, and promos automatically.

• Attach the Defender and Purview suites where the security and governance gaps justify them. The $15 combined position is the SMB analogue of the Microsoft 365 E3 to Microsoft 365 E5 security conversation, but it is not equivalent to Microsoft 365 E5. Use an assessment to drive the business case, and verify any growth-margin impact with Microsoft or your distributor before forecasting it.

• Lead E5 with the agent question. Lead Microsoft 365 E5 and Microsoft 365 Business Premium security upgrades with the agent governance question. Every customer with agents in production should be assessed against the Microsoft Agent 365 prerequisite list. Do not assume they already qualify.

• Structure growth deliberately. Deployment Accelerator eligibility depends on incremental paid seats and the relevant high-water mark rules. Growth Accelerator eligibility depends on tenant-level year-on-year revenue growth across the solution area. A renewal alone is not enough.

• Review your book for 300 seats before October. .Review your book for threshold-sensitive deals before October. Any Microsoft 365 E5, Microsoft 365 E7, Microsoft 365 Copilot, Microsoft Defender Suite, Microsoft Purview Suite or Windows 365 deal near a published threshold should be checked before it is quoted. Treat growth-margin lock-in mechanics as distributor and Microsoft-confirmation items.

• Audit which specialisations you hold against the funding you want to use.
  At enterprise scale, assume select Modern Work or Security specializations may be required. At SMB scale, check the named accelerator, because some Business Premium motions are designation-gated rather than specialization-gated. Without the required specialization, you may be quoting work that another partner can nominate for Microsoft funding.

• Run Copilot in 30 trials with a readiness check attached. The trial is now live and partner-delivered. Twenty-five seats on an unaudited tenant is a governance problem you want to find in week one rather than week five.

• Price your legacy book before October. Office 365 E1 and E3, Exchange Online, SharePoint and Microsoft 365 Apps lose around 5% of base margin. Each of those tenants needs an upgrade plan or a services price that no longer leans on the old margin.

• Ask your distributor, in writing, what growth margin they pass through. The construct is built at their tier. Confirm whether this is being passed through or not.

• Get tenant visibility of your client book. Growth accelerator, growth margin, propensity and readiness are all decided on facts about the tenant rather than your billing system.

Where Softspend fits

FY27 rewards one capability above all others: knowing every tenant in the book well enough to find the next move, price it, and provide fact based business case for the upgrade, before the deal is transacted.

That is what Softspend is built for. Our framework-led assessments run across the whole book with read-only access and return feature-level activation state across Entra, Defender, Purview, Intune, and Microsoft Apps, Copilot rather than a licence count, scored against Copilot readiness, CIS and Zero Trust at the same time. Every gap is mapped to the licensing that closes it and priced, so an assessment lands as advice rather than a finding.

On the commercial side, Deal Economics in the platform models the FY27 levers per deal with the eligible funding mapped, so the October growth margin question becomes a pricing decision rather than a discovery exercise.

Softspend is a pre-sales delivery platform for Microsoft partners. It can produce the scorecard, the ranked gaps, the costed upgrade proposal, and the mapped Microsoft promos and MCI funding available to Partners. Those are the artefacts a client attests against and the ones that make a co-op or MCI claim go in clean. The outputs are "claim ready". The platform is how you produce them at book scale.

One tenant can be worked by hand. A book cannot, and FY27 is the year that difference shows up in the P&L.

References

• FY27 partner GTM sessions: Executing the AI Frontier, Lead the GTM Shift, Lead the AI Shift, CSP Security Sales, Run Your Business Securely, Agent Governance (Microsoft, partner access required)

• Microsoft 365 E7 and Agent 365 general availability: https://techcommunity.microsoft.com/blog/microsoft_365blog/microsoft-365-e7-and-agent-365-are-now-generally-available/4516295

• Partner Center announcements, July 2026: https://learn.microsoft.com/en-us/partner-center/announcements/2026-july

• Microsoft 365 business plans with Copilot, pricing: https://www.microsoft.com/en-us/microsoft-365/business/with-copilot-plans-and-pricing

• Defender Suite for Business Premium: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/add-defender-suite-business-premium

• Business Premium security overview: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-security-overview

• Frontier Partner specialization, coming in FY27: https://techcommunity.microsoft.com/blog/specialization-blog/coming-soon-the-frontier-partner-specialization/4540152

• Frontier Partner specialization overview: https://aka.ms/FrontierPartnerSpec

• Frontier Transformation Engineer badge and partner skilling: https://aka.ms/FrontierPartnerSkilling

• Accelerating Frontier Transformation with Microsoft partners: https://blogs.microsoft.com/blog/2026/04/21/accelerating-frontier-transformation-with-microsoft-partners/

• MCAPS Start for Partners FY27: https://partner.microsoft.com/en-us/blog/article/mcaps-start-for-partners-2026

• Softspend, Paid to Grow, Not to Hold: FY26 vs FY27 CSP incentives: https://softspend.com/community/post/paid-to-grow-not-to-hold-fy26-vs-fy27-csp-incentives

• Microsoft Partner Center, specializations overview: https://learn.microsoft.com/en-us/partner-center/membership/specializations

• Microsoft partner incentives: https://aka.ms/partnerincentives

• Microsoft CSP promotions readiness guide: https://aka.ms/CSPPromoGuide
  

Prices are shown in USD per user per month on the FY27 partner-deck basis and must be validated in Partner Center before quoting. Public annual-commitment list pricing, Teams variants, regional terms and promotional pricing may differ. Microsoft 365 Business plans cap at 300 seats per tenant. Microsoft Agent 365 is a separate SKU from Microsoft 365 Copilot unless included through a qualifying suite such as Microsoft 365 E7. The $15 Microsoft Agent 365 figure is indicative and should be verified before quoting.

The Frontier Partner Specialization and the Agentic Partner Capability Score were announced as FY27 recognition paths. Treat detailed requirements, benefit mechanics and enrolment timing as subject to Microsoft’s final published rules. Growth margin is a margin construct, not Microsoft Commerce Incentives. FY27 growth margin rates and final mechanics are unavailable in the funding guide, so verify with Microsoft and your distributor before building forecasts around them.

Promotions are customer savings, not partner revenue. Promotional discounts can reduce billed revenue and therefore reduce the CSP incentive base. Co-op is contingent accrued value, not guaranteed cash. Microsoft-funded engagements require nomination, eligibility, Proof of Execution and compliance with the relevant programme terms.

#MSPartner #CSP #MSP #Microsoft365 #FY27 #MicrosoftCopilot #Agent365 #MicrosoftPurview #MicrosoftDefender #MicrosoftEntra #BusinessPremium #softspend

Key Takeaways

This article by Tony Mackelworth, CEO of Softspend, reads Microsoft's FY27 partner strategy through the six Microsoft 365 workloads a CSP or MSP actually sells: Microsoft Entra, Microsoft Defender, Microsoft Purview, Microsoft Intune, Microsoft 365 Copilot and Microsoft Agent 365. It argues that FY27 is not a rate change but an alignment, with the go-to-market framework, suite architecture, incentive rate card, margin construct and funding programmes all rewarding the same behaviour: moving tenants up the Microsoft 365 stack and being paid for the movement rather than the ownership. The piece sets out the FY27 framework as two lanes, Core (Entra, Defender, Purview and Intune switched on and configured) and Frontier (Microsoft 365 Copilot and Agent 365 running on top), with an enterprise version and a compressed SMB version for organisations below 300 seats. Rather than comparing SKUs, it maps the enterprise ladder workload by workload: Entra moves from ID P1 to ID P2 to the full Entra Suite, Defender and Purview and Intune step from P1 to P2 with Security Copilot arriving at E5, and Microsoft 365 Copilot and Agent 365 arrive at E7. It draws two conclusions from that reading: the upsell trigger is a workload gap rather than a SKU gap, and the E5 rung is now load-bearing because every Frontier capability assumes E5 underneath it. A dedicated section explains that new Agent 365 purchases require Microsoft 365 E5 from 1 June 2026, arguing that Microsoft is not gating a feature but refusing to sell an agent control plane into a tenant whose identity and data controls sit at P1, since Agent 365 governance is delivered through Entra, Defender and Purview. The article covers the transition from FY27 Q1 promotions to growth margin on 1 October 2026, publishing the now-visible criteria for the three growth motions (new-to-offer, seat expansion and strategic SKU mix, each with a 300 seat minimum and mix qualifying at an 80% strategic-to-base ratio) and noting that eligibility is assessed at tenant level across all partners and locks at the time of sale. The SMB section presents the motion as floor, step and pull: Microsoft 365 Business Premium at $22 as the floor, the Defender and Purview suites for Business Premium at $10 each or $15 combined as the step, and Microsoft 365 Copilot Business at $21 as the pull, with Purview Suite at $5 through 31 December 2026. A section on Copilot economics covers Copilot Credits as a pooled currency at $0.01, cost management and policy controls in the Microsoft 365 admin centre, and the zoned governance model for agent development. It closes with Forrester partner opportunity figures, the 30% licence margin against 60% to 70% services margin ratio, and seven actions for partners before October, beginning with inventorying the six workloads rather than the SKUs.

Key Facts

• Microsoft's FY27 go-to-market framework has two lanes, Core and Frontier, applied to enterprise and corporate customers and compressed into fewer conversations for SMB customers below 300 seats.
• For a Microsoft 365 partner, Core means Microsoft Entra, Microsoft Defender, Microsoft Purview and Microsoft Intune activated and configured, and Frontier means Microsoft 365 Copilot and Microsoft Agent 365 running on top of that foundation.
• Microsoft 365 E3 at $39 per user per month includes Microsoft Entra ID P1 with Conditional Access, Microsoft Defender P1, Microsoft Purview P1 with Information Protection and Data Loss Prevention, and Microsoft Intune P1.
• Microsoft 365 E5 at $60 per user per month steps Entra, Defender, Purview and Intune to P2 and adds Security Copilot.
• Microsoft 365 E7 at $99 per user per month adds Microsoft 365 Copilot, the Microsoft Entra Suite and Microsoft Agent 365 on top of Microsoft 365 E5.
• Microsoft 365 E7 reached general availability on 1 May 2026 and is the first new enterprise edition since Microsoft 365 E5 launched in 2015.
• Microsoft 365 E7 prices below the approximately $117 per user per month cost of buying Microsoft 365 E5, Microsoft 365 Copilot, the Entra Suite and Agent 365 separately, and is available with and without Teams.
• The Microsoft Entra Suite included in Microsoft 365 E7 adds identity governance, Zero Trust network access and Verified ID.
• Microsoft Agent 365 is available standalone at $15 per user per month and is included in Microsoft 365 E7.
• From 1 June 2026 a new Microsoft Agent 365 purchase requires one of the following qualifying positions: Microsoft 365 E5, A5 or Business Premium; Microsoft Defender Suite and Microsoft Purview Suite; the Education variants of those suites; or Microsoft Defender and Purview Suite FLW.
• Microsoft 365 Business Premium qualifies for Agent 365 in its own right, so agent governance is reachable on an SMB tenant at $15 per user per month without moving to Microsoft 365 E5.
• The Microsoft Defender Suite and Microsoft Purview Suite pairing also qualifies for Agent 365 without Microsoft 365 E5 underneath it.
• Microsoft's Partner Center announcement is headlined as requiring Microsoft 365 E5 while its body lists four qualifying positions including Business Premium, which has caused the change to be widely misreported.
• Microsoft 365 E7 is unaffected by the Agent 365 prerequisite because it already includes Microsoft 365 E5, Agent 365, Microsoft 365 Copilot and the Microsoft Entra Suite.
• Microsoft Agent 365 governance is delivered through Microsoft Entra for agent identity and access, Microsoft Defender for runtime protection, and Microsoft Purview for what agents can read and emit.
• IDC forecasts 1.3 billion enterprise AI agents in production by 2028.
• FY27 CSP promotions on Microsoft 365 E3 and E5 run through Q1 FY27, and Microsoft 365 E7 promotions run through H1 FY27 to December 2026, with a seat maximum of 9,999 across all promotions.
• CSP growth margin launches on 1 October 2026 for Microsoft 365 E5, Microsoft 365 E7, Microsoft 365 Copilot, the Microsoft Defender and Microsoft Purview suites and Windows 365, as upfront margin on top of base margin.
• Growth margin qualifies through new-to-offer, seat expansion and strategic SKU mix, each carrying a 300 seat minimum, with expansion at a 1x increase and mix at an 80% strategic-to-base ratio.
• Microsoft 365 E3 is not eligible for growth margin and its partner economics hold flat.
• Growth margin eligibility is assessed at tenant level across all channels and partners and locks at the time of sale with no retrospective adjustment.
• Microsoft 365 Business Premium at $22 per user per month includes Microsoft Entra ID P1, Microsoft Defender for Business, Microsoft Defender for Office 365 Plan 1, Microsoft Intune Plan 1, Microsoft Purview Data Loss Prevention and Information Protection, and Copilot Chat with enterprise data protection.
• The Microsoft Defender Suite for Business Premium adds Microsoft Entra ID P2, Microsoft Defender for Endpoint Plan 2, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps and Microsoft Defender for Office 365 Plan 2.
• The Microsoft Purview Suite for Business Premium adds insider risk management, communication compliance, premium eDiscovery and audit, customer key, and records and data lifecycle management.
• The Defender and Purview suites for Business Premium are priced at $10 per user per month each or $15 combined, for up to 300 seats on annual commitment.
• Microsoft Purview Suite for Business Premium is available at $5 per user per month, 50% off, through 31 December 2026 for customers holding Business Premium and Copilot.
• Microsoft 365 Copilot Business is priced at $21 per user per month for organisations under 300 users, with promotional rates running during 2026.
• Microsoft 365 Business Standard rose to $14 per user per month on 1 July 2026, Business Basic rose to $7, and Business Premium held at $22.
• Microsoft 365 Business Standard does not include Conditional Access, Microsoft Intune or Microsoft Purview data classification, so it is a productivity plan rather than a security position.
• On 1 July 2026 the discounted SMB Copilot bundles became permanent SKUs rather than expiring: Business Basic with Copilot at $27, Business Standard with Copilot at $23.50 and Business Premium with Copilot at $32 per user per month, for 1 to 300 seats on annual commitment.
• Microsoft 365 Business Premium with Copilot at $32 per user per month costs less than buying Business Premium at $22 and Copilot Business at $21 separately, a saving of $11 per user per month.
• Copilot Credits are a single pooled currency across Microsoft first-party AI services priced at $0.01 per credit, available prepaid with volume discount or as pay-as-you-go, with the Microsoft 365 Copilot licence remaining the floor.
• Copilot Credit cost management, spending policies and limits are configured at tenant, group and user level in the Microsoft 365 admin centre, with team-level visibility in Insights.
• Microsoft funds the SMB security motion with conversion bonuses up to $1,600, deployment accelerators up to $2,000, co-op approved Immersion Briefings and free Microsoft-delivered Solution Assessments.
• Forrester puts the partner services and solutions opportunity for secure AI productivity at $43.85 per user per month and security at $30.40 per user per month, with around 70% of the security opportunity being services.
• Partner margin on a Microsoft licence is approximately 30% against 60% to 70% on services, and around 40% of CSP incentive is paid as co-op.
• On a flat 1,000-seat Microsoft 365 Business Premium book an indirect reseller earned approximately $17,820 in FY26 through core at 3.75% plus the Tier 1 accelerator, and earns approximately $6,600 in FY27 through Tier 1 alone at 2.5%, a reduction of around 63%.
• A flat 1,000-seat Microsoft 365 Business Standard book earned approximately $5,625 in FY26 through the core rebate and earns nothing in FY27, because flat Business Standard and Office 365 run-rate sits outside every FY27 lever once the reseller core rebate is retired.
• The same 1,000-seat Business Premium book with the Defender and Purview security suites attached at $15 per user per month earns approximately $33,600 in FY27, roughly five times the flat book and more than the flat book earned under FY26.
• The Microsoft 365 Business Premium security suites do not upgrade Microsoft Intune beyond Plan 1; advanced endpoint management requires the separate Microsoft Intune Suite.
• The MCI Business Premium motion pays $2,000 for the deployment and $2,000 for the security suites on any client with 50 or more net-new seats through CSP, with a further $1,600 conversion bonus that is conditional on displacing a competitor.
• Growth qualifies on new seats written on a new subscription, so structuring an upgrade mid-term rather than waiting for the renewal date avoids deferring the earning for no benefit.
• From October 2026 Microsoft reduces partner base margin by around 5% on a set of legacy and standalone products including Office 365 E1, Office 365 E3, Exchange Online, SharePoint, OneDrive extra storage, Microsoft 365 Apps for Business and Microsoft 365 Apps for Enterprise.
• 1 October 2026 changes partner economics in two opposite directions on the same day: growth margin arrives on the strategic product set while base margin falls on the legacy set, so a partner who takes no action earns less on the same customers.
• The CSP growth margin construct is built at distributor and direct bill tier, so what reaches an indirect reseller depends on what the distributor passes through.
• Under FY27 Change of Channel Partner rules the twelve month ineligibility runs from the date the change is identified rather than the date the customer moved, applies whether the customer initiated the move or the previous partner cooperated, is triggered by adding a partner as well as replacing one, and is not avoided by letting a subscription lapse and rewriting it under a new partner in the same tenant and solution area.
• Mergers, acquisitions, company splits and business closures are exempt from Change of Channel Partner rules.
• CSP incentive growth is measured at the customer tenant against all prior-year revenue in that tenant and solution area regardless of which partner earned it, so a decline in another partner's revenue in the same tenant can offset a partner's own new sale.
• Microsoft Copilot Cowork reached general availability on 16 June 2026, bills through Copilot Credits at $0.01 per credit, and ships off by default, so an administrator must enable access and set spending limits before any credits are consumed.
• Microsoft publishes the FY27 customer conversations but not the mapping from each conversation to the licensing that delivers it, so partners have to construct that mapping themselves.
• The SMB framework has five conversations against eight for enterprise, and four of the five SMB conversations are delivered by Microsoft 365 products.
• The SMB conversation "run your business securely" is delivered by Microsoft 365 Business Premium and the Defender and Purview suites, and sells as security baseline, posture assessment and managed detection and response.
• The SMB conversation "modernise your data to drive results and use AI" is delivered by Purview in Business Premium plus SharePoint and OneDrive hygiene, and sells as oversharing remediation, permissions clean-up and classification.
• The SMB conversation "power your business with secure AI in your flow of work" is delivered by Microsoft 365 Copilot Business or the with-Copilot bundles, and sells as readiness assessment, trial delivery and adoption.
• The SMB conversation "scale business processes with agent-powered finance" is delivered by Dynamics 365 Business Central and sits outside the Microsoft 365 stack.
• The Agentic Partner Capability Score was announced as an AI Cloud Partner Program update open to eligible partners demonstrating agent build and delivery capability, with no published restriction by customer segment, despite a Microsoft SMB-facing slide labelling it "for SMB focused partners".
• Microsoft is introducing two partner recognitions in FY27 that sit at different depths rather than serving different customer segments: the Agentic Partner Capability Score, which accelerates Partner Capability Score points, and the Frontier Partner Specialization, which is a top-tier specialisation validated by third-party audit.
• Microsoft has published the three scoring components of the Agentic Partner Capability Score, being Usage measured as agent monthly active users, Value measured as agent consumption, and Trust measured as governed and secure agent delivery, along with its effect of earning Partner Capability Score points at an accelerated rate.
• Microsoft has not published thresholds, eligibility prerequisites, enrolment mechanics or applicable solution areas for the Agentic Partner Capability Score, and there is no Partner Center or Microsoft Learn documentation for it.
• The Frontier Partner badge already exists and requires three Solutions Partner designations, being Modern Work or Business Applications, Security, and a Cloud and AI Platform-aligned designation, plus three specialisations: Microsoft 365 Copilot, Data Security, and one of AI Apps on Microsoft Azure, AI Platform on Microsoft Azure or Accelerate Developer Productivity. That badge is evolving into the Frontier Partner Specialization.
• Microsoft Modern Work and Security specialisations each cap product benefits at three specialisations and Azure caps at five, but the cap applies to product benefits only, so a fourth specialisation still counts for engagement eligibility and co-sell positioning.
• Some specialisations carry a fifth requirement of a published Microsoft Marketplace offer tagged to the relevant products, with the Agentic Business Solutions specialisation the clearest current example.
• FY26 security workshops are retired; in FY27 the equivalent funded engagements run through Frontier Accelerate as Security: Envisioning and PoC, alongside the CSP Deployment Accelerators for Defender and Purview or for Microsoft 365 E5 and E7.
• For CSP indirect resellers, Microsoft Commerce Incentives eligibility also recognises a 25-point Partner Capability Score route in the relevant solution area, assessed monthly across the current month and the previous five, so eligibility can lapse and recover with the score.
• The SMB Business Premium deployment accelerator, the security suites accelerator and the conversion bonus gate on designation, transaction evidence and seat thresholds rather than on specialisation.
• The Agentic Partner Capability Score allows eligible partners to earn Partner Capability Score points at an accelerated rate.
• The Frontier Partner Specialization requires four prerequisite specialisations held under the same Partner Global Account: Microsoft 365 Copilot, AI Apps on Microsoft Azure or AI Platform on Microsoft Azure, Data Security, and Identity and Access Management.
• The Frontier Partner Specialization also requires five individuals to hold the Frontier Transformation Engineer badge, three individuals to hold Fabric Analytics Engineer Associate (DP-600), and a third-party delivery capability audit on a two-year cadence.
• Frontier Partner Specialization benefits include Frontier-aligned co-sell eligibility, Microsoft Agent prepurchase plan credits, Microsoft 365 E7 licensing, packaged go-to-market resources and Concierge support.
• The Frontier Transformation Engineer badge validates building AI agents across Microsoft Foundry, Microsoft Copilot Studio, Microsoft 365 Copilot, GitHub Copilot, Microsoft Fabric and Microsoft Agent 365.
• The Microsoft 365 Copilot specialisation now measures performance on paid Microsoft 365 Copilot monthly active usage rather than seats sold, and has replaced customer references with a third-party capabilities audit valid for two years.
• Microsoft Modern Work specialisations are Microsoft 365 Copilot, Secure AI Productivity (formerly Teamwork Deployment), Modernize Endpoints, Calling for Microsoft Teams, Meetings and Meeting Rooms for Microsoft Teams, and Custom Solutions for Microsoft Teams. Adoption and Change Management is retired.
• Microsoft Security specialisations are Data Security (formerly Information Protection and Governance), Identity and Access Management, Threat Protection, Cloud Security and Copilot, with an Agentic Security specialisation in design for FY27.
• Microsoft specialisations are gated on four requirements at once: the aligned Solutions Partner designation, a performance threshold measured from customer telemetry, named certifications held by a named number of people, and validation through customer references or a third-party audit.
• From the end of July 2026 all four Microsoft Security specialisations move to an independent third-party audit model, partner-funded and conducted every two years, with a six-month anniversary extension for partners to prepare.
• Specialisation validation through customer references or audit is revalidated every other year rather than annually, while eligibility, performance and skilling are revalidated annually.
• Each solution area caps specialisation product benefits, with Modern Work and Security each capped at three.
• Microsoft's FY27 partner motion divides into four stages funded differently: demand and marketing funded by co-op, advisory and assessment funded by Solution Assessments and Envisioning and PoC, transaction earning CSP incentives and growth margin, and deployment and adoption funded by the Deployment Accelerator and Conversion Bonus.
• Three of the four partner motion stages are fundable by Microsoft, and the transaction stage is the one that is not and where margin eligibility locks permanently.
• Microsoft partner funding comes from two pots that behave differently: co-op, which is 40% of the CSP incentive already earned and expires if unclaimed, and MCI, which pays a fixed fee per completed client engagement.
• Co-op accrues on CSP sales each half-year, clears a $10,000 semesterly threshold, has no activity cap on most plays, and requires no specialisation and no deployment.
• Co-op plays and rates: demand campaign up to around 50% of the fund, client briefings around $750 each with no cap, sales skilling around 10% guidance, and proof of value at actual cost with a 5% cap.
• MCI plays and fees per client at Market A: security workshop $2,000 to $15,000, Copilot advisory $2,000 to $25,000, modern workplace E3 to E5 $2,000 to $25,000, SMB Business Premium $2,000 deployment plus $2,000 suites plus $1,600 switch bonus, and deployment accelerators fixed by size to $50,000 or more.
• Work claimed under MCI cannot also be claimed from co-op, which is the single hard rule across both funding pots.
• The entire co-op pot is available with no specialisation: any CSP partner accruing on CSP sales qualifies, at any client size, with nothing required to be deployed, subject only to the $10,000 semesterly balance.
• A partner holding a Modern Work designation, a Security designation and a co-op balance can run a fully funded SMB security motion today, with co-op paying to find and brief the client and MCI paying roughly $5,600 to deploy and secure them.
• MCI-funded pre-sales engagements carry a 300 seat floor, so below 300 seats the client readout runs as a co-op client briefing or proof of value instead.
• The SMB Business Premium deployment accelerator, the security suites accelerator and the conversion bonus gate on active Modern Work and Security Solutions Partner designations rather than on specialisations.
• The MCI security workshop requires one of the Cloud Security, Identity and Access Management, Threat Protection or Data Security specialisations, and the MCI Copilot advisory requires the Copilot specialisation, which becomes mandatory from 1 January 2027.
• Microsoft launched Copilot in 30 on 1 August 2026 as a partner-delivered 30-day Microsoft 365 Copilot Business trial for up to 25 users, requiring a qualifying Microsoft 365 Business Basic, Business Standard or Business Premium subscription.
• The low-friction Microsoft 365 Copilot trial is separate from Copilot in 30: it is self-service, on by default, and started by an eligible end user without an administrative purchase decision.
• Microsoft Commerce Incentives eligibility is gated on a Solutions Partner designation or 25 Partner Capability Score points plus a revenue threshold, not on holding a specialisation.
• A Solutions Partner designation requires 70 points on the Partner Capability Score, and Microsoft Commerce Incentives eligibility requires the designation or 25 points, plus $1M trailing twelve month revenue at Partner Global Account level for direct bill partners or $25K at Partner Location Account level for indirect resellers.
• The Agentic Partner Capability Score accelerates Partner Capability Score points, which are what earn Solutions Partner designations, so it is a faster route to Microsoft Commerce Incentives eligibility rather than a marketing credential.
• For a Microsoft 365 security and Copilot practice the relevant specialisations are Identity and Access Management for Entra, Threat Protection for Defender, Data Security for Purview, Microsoft 365 Copilot for Copilot, and Secure AI Productivity for the readiness work.
• The Identity and Access Management specialisation funds the Business Premium to Defender Suite identity pathway in SMB and the E3 to E5 to Entra Suite pathway in enterprise.
• The Threat Protection and Data Security specialisations fund the Defender and Purview Suite attach in SMB and the Plan 1 to Plan 2 step from E3 to E5 in enterprise.
• The Microsoft 365 Copilot specialisation funds the Copilot Business and with-Copilot bundle motion in SMB and the Copilot add-on, E7 and Agent 365 motion in enterprise.
• Microsoft's FY27 enterprise-tier funded engagements all carry the same eligibility line, "Partner eligibility: select Modern Work or Security specializations", on Envisioning and PoC, the CSP Deployment Accelerator and the Conversion Bonus, each also subject to Partner Performance Accountability.
• The CSP Deployment Accelerator is available to customers purchasing at least 50 incremental seats on CSP annual-term subscriptions, so it is not restricted to enterprise-scale customers; only the Envisioning and PoC engagement carries a 300-seat customer threshold.
• Microsoft's SMB material names separate variants, being the Business Premium Deployment Accelerator, the CSP BP Defender and Purview Suites Deployment Accelerator and two Business Premium conversion bonuses, whose partner-facing terms are reported as gating on Modern Work and Security designations rather than specialisations, which conflicts with the specialisation requirement stated on the generic engagements.
• Microsoft's FY27 funding programmes gate on specialisation: Envisioning and PoC, the CSP Deployment Accelerator and the Conversion Bonus each require a select Modern Work or Security specialisation.
• Frontier Accelerate consolidates incentives, funding, skilling, specialisations, go-to-market support and customer engagement investment into one motion, so partners no longer have to choose between funding sources on a single engagement.
• Microsoft's MCAPS worked examples show earnings up 180% year on year on 1,000 Microsoft 365 Copilot seats with $500K annual Copilot Cowork consumption through CSP, 64% on a $175K Azure database migration, and 46% on 1,000 Microsoft 365 E5 seats through CSP.
• Microsoft launched Copilot in 30 on 1 August 2026, a partner-delivered 30-day Microsoft 365 Copilot Business trial for up to 25 users on an eligible Microsoft 365 Business Basic, Standard or Premium subscription, with new reseller activation incentives behind conversion.
• Frontier Accelerate for Marketplace arrives in September 2026, unifying ISV Success, Marketplace Rewards, Azure IP co-sell and certified software designations, with Azure sponsorships up to $30K, $400K and $2M across build, grow and differentiate stages.
• Softspend connects to a tenant through the Microsoft Graph with read-only access and returns feature-level activation state across Entra, Defender, Purview and core productivity, scored against Copilot readiness, the CIS Microsoft 365 Foundations Benchmark and Zero Trust, with each gap mapped to the licensing that closes it and priced.

Sources

• https://techcommunity.microsoft.com/blog/microsoft_365blog/microsoft-365-e7-and-agent-365-are-now-generally-available/4516295
• https://learn.microsoft.com/en-us/partner-center/announcements/2026-july
• https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/add-defender-suite-business-premium
• https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-security-overview
• https://techcommunity.microsoft.com/blog/specialization-blog/coming-soon-the-frontier-partner-specialization/4540152
• https://blogs.microsoft.com/blog/2026/04/21/accelerating-frontier-transformation-with-microsoft-partners/
• https://partner.microsoft.com/en-us/blog/article/mcaps-start-for-partners-2026
• https://aka.ms/FrontierPartnerSpec
• https://aka.ms/FrontierPartnerSkilling
• https://aka.ms/partnerincentives
• https://aka.ms/incentivesguide
• https://aka.ms/CSPPromoGuide
• https://www.microsoft.com/solutionassessments
• https://aka.ms/AgentGovernanceAndSecurity
• https://softspend.com/community/post/paid-to-grow-not-to-hold-fy26-vs-fy27-csp-incentives
• https://softspend.com/community/post/end-of-an-era-how-microsoft-rebuilt-its-commercial-model-for-fy27
• https://softspend.com/community/post/15-zero-trust-microsoft-smb-security-economy
• https://softspend.com/community/post/smb-copilot-readiness-what-to-fix-first