Intune Suite lands in Microsoft 365 E3/E5 — what MSPs must do now
Microsoft has begun rolling Intune Suite capabilities into Microsoft 365 E3 and E5 (July 2026). For MSPs this changes licensing, service scoping, and endpoint controls — here’s a short checklist to inventory, secure, and update client offerings fast.
Intune Suite lands in Microsoft 365 E3/E5 — what MSPs must do now
Microsoft started rolling advanced Intune capabilities into Microsoft 365 E3 and E5 in July 2026. That shifts endpoint features (Advanced Analytics, Endpoint Privilege Management, Cloud PKI, Remote Help, Enterprise App Management) from add‑on to included for many customers — and it changes the risk and opportunity map for MSPs.
Why this matters to MSPs
- Licensing just changed: more clients may already be entitled to features you previously billed for.
- Feature enablement is optional but rolling out gradually — tenants may not see everything at the same time.
- New capabilities change operational tasks: certificate lifecycle (Cloud PKI), privilege escalation controls (EPM), and remote support options.
Quick action checklist (do this this week)
- Inventory tenants: map which customers are on M365 E3/E5 and mark who gains Intune Suite features.
- Audit current tooling: identify paid third‑party services that overlap with Intune Suite and flag clients for contract review.
- Update runbooks: add configuration steps for Cloud PKI, EPM, Remote Help and Advanced Analytics — don’t assume defaults are safe.
- Pilot and document: enable features in a test client, validate SSO, certificate issuance, and least‑privilege workflows.
- Communicate changes: update SLAs/pricing and tell clients what new capabilities you’ll adopt or replace.
Practical gotcha
These features can be powerful but are not magic — they require configuration and governance. Rollouts are staged by Microsoft, and some features need admin setup before they help reduce risk.
Takeaway
Treat this as an efficiency and security opportunity: run a rapid tenant scan, update your service catalog, and pilot Cloud PKI/EPM in a controlled client. Need a short checklist you can run across 50 tenants? We can share a template — tell us how many tenants you manage.