Forum Discussion

Michael_Obeng's avatar
Michael_Obeng
Copper Contributor
Jun 24, 2025
Solved

DLP

Hello Team, please does Microsoft Business Premium support Endpoint Data Lost Protection 

6 Replies

  • Hi If I am not mistaken,defender for cloud apps comes as a part of M365 E5 Information Protection and Governance or E5, correct me if I am wrong here.

    • You're partially right, but let me clarify it for you:

      Microsoft Defender for Cloud Apps (formerly MCAS) is not directly included in Microsoft 365 E5 Information Protection & Governance — it's included in the full Microsoft 365 E5 suite or can be purchased as a standalone license or part of the Enterprise Mobility + Security E5 (EMS E5) suite.

      Here's a breakdown:

      Included in:

      • Microsoft 365 E5 (the full suite, not just Info Protection & Governance add-on)
      • Enterprise Mobility + Security E5 (EMS E5)
      • *Microsoft Defender for Cloud Apps (standalone license)

      Not included in:

      • Microsoft 365 E5 Information Protection & Governance
      • Microsoft 365 E5 Compliance
      • Microsoft 365 E3

      Summary:

      If you have the Microsoft 365 E5 suite or EMS E5, then yes, you have Defender for Cloud Apps. But if you only have the E5 Information Protection & Governance add-on, you do not get Defender for Cloud Apps.

    • Michael_Obeng's avatar
      Michael_Obeng
      Copper Contributor

      Hello Duliprb, you are correct, the license I was having issue with is the Business Premium

  • Hi Michael_Obeng​ Microsoft 365 Business Premium does not include Endpoint Data Loss Prevention (Endpoint DLP) out of the box.

     

    Couple of Options:

    1.Upgrade to a plan that includes Endpoint DLP, like:

      • Microsoft 365 E5, or
      • Add-ons such as “E5 Compliance” or “E5 Information Protection & Governance” to your existing licenses.
        (You can trial “E5 Compliance” as a stand-alone add-on first)

    2.Use alternatives:

      • Defender for Cloud Apps (formerly MCAS) to block cloud uploads to services like Dropbox, Google Drive.
      • Defender for Endpoint Device Control for blocking USB, Bluetooth, printing etc.
        These tools don't offer full DLP policy flexibility but can achieve targeted controls.

     

Resources