Intune Plan 1 vs Intune Suite
Intune manages the phones and computers in your organization. Every Microsoft 365 business and enterprise plan includes the core of it. What changed in July 2026 is the advanced Intune Suite: its capabilities now follow your plan tier instead of always being a separate purchase.
You probably already have Plan 1
Intune Plan 1 is included with Microsoft 365 Business Premium, E3, E5, E7, F1, and F3. It handles the essentials: enrolling devices, pushing settings and policies, protecting company data in apps, and wiping a lost or stolen device. For a lot of organizations, that is the whole job.
So before pricing anything, check what you own. If you are on one of those plans, you are already managing devices with Intune. The question is only whether you need more, and on the E tiers you may already have that too.
What your plan already includes
Since July 2026 Microsoft distributes the Suite capabilities across the Microsoft 365 tiers. This is the part most worth checking before you renew an add-on.
| Your plan | Intune Suite capabilities included |
|---|---|
| Microsoft 365 E3 | Intune Plan 2, Remote Help, and Advanced Analytics |
| Microsoft 365 E5 and E7 | Everything in E3, plus Endpoint Privilege Management, Microsoft Cloud PKI, and Enterprise Application Management |
| Business Premium, F1, F3, and other plans | None. The Suite remains a separate subscription |
Source: Microsoft Intune planning guide, costs and licensing, verified September 23, 2026. Confirm entitlements for your own subscriptions before changing an order.
What the Intune Suite covers
The Suite bundles the advanced capabilities. The pieces people ask for most:
| Capability | What it does |
|---|---|
| Remote Help | Secure, in-Intune remote assistance for help-desk support |
| Endpoint Privilege Management | Let standard users run approved tasks as admin without giving them full admin rights |
| Advanced Analytics | Deeper reporting and device insights |
| Microsoft Tunnel for MAM | VPN access from unmanaged mobile devices |
| Enterprise App Management | Discover, deploy, and update third-party apps from a catalog |
| Cloud PKI | Cloud-based certificate management without on-premises servers |
Price and how it is sold
Where the Suite is still a separate purchase, it lists at around $10 per user per month on top of a plan that already includes Intune Plan 1. Several of its components can also be bought individually if you only want one, such as Remote Help or Endpoint Privilege Management on its own.
List prices are estimates in USD on an annual commitment and change over time. Confirm current pricing with your Microsoft partner.
Do you need the Suite?
Start by checking your tier. On E5 or E7 the answer is no: you already have these capabilities, and an existing Suite line on your order is worth reviewing at renewal. On E3, you already have Intune Plan 2, Remote Help, and Advanced Analytics, so the Suite buys you Endpoint Privilege Management, Cloud PKI, and Enterprise Application Management, and a single standalone add-on may be cheaper if you only want one of them.
On Business Premium or the Frontline plans, stay on Plan 1 if standard device management, app protection, and remote wipe cover your needs. Add the Suite when a specific capability solves a real problem: a help desk that wants secure remote control, a security team that wants to remove local admin rights while keeping people productive, or mobile workers who need app-level VPN from personal devices.
Answer five questions and get your exact licenseFree. No sign-up. Real prices and when to upgrade.Common questions
Is Intune included in Microsoft 365?
Yes. Intune Plan 1, the core device and app management, is included with Microsoft 365 Business Premium, E3, E5, E7, F1, and F3. Since July 2026 the advanced Suite capabilities also follow the plan tier: E3 includes Intune Plan 2, Remote Help, and Advanced Analytics, and E5 and E7 add Endpoint Privilege Management, Microsoft Cloud PKI, and Enterprise Application Management.
Do I need to buy the Intune Suite if I have E5 or E7?
No. Those plans include the Suite capabilities, so buying the Suite on top of them pays twice for the same features. If you already have that add-on on an E5 or E7 order, it is worth reviewing at renewal.
Who still buys the Intune Suite separately?
Organizations on plans outside the E tiers, such as Business Premium and the Frontline plans, where it remains a separate subscription. E3 customers may also add it for the three capabilities E3 does not include.
Can I buy just Remote Help or Endpoint Privilege Management?
Yes. Endpoint Privilege Management, Enterprise App Management, Advanced Analytics, Remote Help, and Cloud PKI are each sold as standalone add-ons, so you can license only the one you need instead of the whole Suite.