Not all Microsoft 365 subscriptions include eDiscovery licenses, and the terminology has changed more than once since Microsoft folded eDiscovery into the Microsoft Purview compliance suite. If you’re trying to figure out which subscription level actually unlocks eDiscovery, here’s what still trips people up:
- Do you need Core eDiscovery, or do you need Advanced eDiscovery?
- Is Content Search included in all plans or is it subscription-based?
- What is the difference between them (Core eDiscovery vs. Advanced eDiscovery)?
- Do we subscribe to Microsoft 365 or Office 365?
- Does our Microsoft 365 subscription permit add-ons?
Like most tools, deciding which one is best is dependent on user needs and price.
A quick note on naming: Microsoft’s classic eDiscovery experience (including what was previously branded Core eDiscovery and Advanced eDiscovery) was retired on August 31, 2025. Everything now runs through the Microsoft Purview portal under the names eDiscovery (Standard) and eDiscovery (Premium). If you see older documentation (including earlier versions of this article) referencing “Core” or “Advanced” eDiscovery, they’re describing the same tiers under their old names.
What is Microsoft Purview Content Search, and how do you get it?
Every Microsoft 365 subscription with access to the Microsoft Purview compliance portal includes Content Search. It lets users run search queries and export data from mailboxes, SharePoint sites, and OneDrive. Content Search is a starting point, not a replacement. Most organizations use it alongside eDiscovery (Standard) or (Premium) rather than instead of them.
What roles are available in Microsoft Purview eDiscovery?
Both eDiscovery (Standard) and eDiscovery (Premium) use the same two assignable roles:
- Reviewer — the most restricted role. Reviewers can see and open the list of cases and perform analysis, but can’t create or manage cases.
- eDiscovery Manager — full access to create and manage cases, place holds, and prepare search results.
How to access Microsoft Purview eDiscovery (Standard)
To access eDiscovery (Standard), your organization needs at minimum a Microsoft 365 E3 or Office 365 E3 subscription.
The practical difference between the two: Microsoft 365 bundles in the Windows OS and Enterprise Mobility Suite; Office 365 is apps only (SharePoint, OneDrive, the Office suite). Either E3 tier lets you assign users an E3 license, which allows placing eDiscovery holds on mailboxes and sites. From there, an admin just assigns eDiscovery permissions to the users who need access.
Accessing Premium takes one more step.
How to access Microsoft Purview eDiscovery (Premium)
For eDiscovery (Premium), your organization needs a Microsoft 365 E3 subscription plus the E5 Compliance add-on, unless you’re already on Microsoft 365 E5 or Office 365 E5, in which case Premium is included and no add-on is needed.
- Microsoft 365 E5 subscribers: assign users a standard E5 license.
- Microsoft 365 E3 subscribers: assign users an E5 Compliance add-on license.
- Office 365 users: need an Office 365 E5 license to reach Premium.
One thing that catches people off guard: IT administrators, eDiscovery managers, lawyers, paralegals, and investigators who are using eDiscovery (Premium) to manage a case don’t personally need an E5 or add-on license themselves. The licensing requirement applies to the custodians whose data is being placed on hold and searched, not to every person working the case.
Licensed correctly doesn’t mean staffed to use it
Even with the right Purview tier, running a defensible eDiscovery process, placing holds, managing custodians, and producing a clean export, takes more than a license. Percipient’s eDiscovery and digital forensics team handles the collection, review, and production work so your legal team isn’t learning Purview mid-litigation.
eDiscovery (Standard) vs. eDiscovery (Premium): what’s actually different?
For ease of reference, we put together a comparison of Microsoft Core eDiscovery and Advanced eDiscovery features.
| Features | eDiscovery Standard | eDiscovery Premium |
|---|---|---|
| Mailbox Holds | X | X |
| Site Holds | X | X |
| SharePoint Holds | X | X |
| eDiscovery Case | X | X |
| Content Search | X | X |
| Export Results | X | X |
| Duplicate Detection | X | X |
| Custodian Specification | X | |
| Custodian Communication | X | |
| Processing | X | |
| Review Sets | X | |
| Email Threading | X | |
| Near-Duplicate Detection | X | |
| Optical Character Recognition (OCR) | X | |
| Analytics & Themes | X | |
| AI-Assisted Review | X |
Frequently asked questions
Is Core eDiscovery still a thing? No. Microsoft retired the classic eDiscovery experience, including the “Core eDiscovery” and “Advanced eDiscovery” names, on August 31, 2025. The same functionality now lives in the Microsoft Purview portal as eDiscovery (Standard) and eDiscovery (Premium).
What license do I need for eDiscovery (Standard)? Microsoft 365 E3 or Office 365 E3, at minimum.
What license do I need for eDiscovery (Premium)? Microsoft 365 E5 or Office 365 E5, or Microsoft 365 E3 with the E5 Compliance add-on.
Does everyone on an eDiscovery case need an E5 license? No. Only the custodians whose content is on hold need the appropriate license. Case administrators and reviewers don’t need E5 themselves to work a Premium case.
Can Content Search replace eDiscovery entirely? Not for anything involving legal holds or a formal case workflow. Content Search is a search-and-export tool; eDiscovery (Standard) and (Premium) add case management, holds, and (in Premium’s case) review and analytics.
Additional articles about Microsoft eDiscovery:
Augmenting Microsoft 365 eDiscovery Search Capabilities for Best Results
