Microsoft Enterprise Mobility + Security E3 Vs E5

Microsoft EMS E5 contains everything in EMS E3 with three additions:

• You now get the “P2” Version of Azure Active Directory. It contains “new Identity Protection and Privileged Identity Management” capabilities. These new functions help protect against identity theft, and provide additional usage data on admin actions.
• Microsoft’s new Cloud App Security – this can help you discover the cloud apps in use in your network, and control access to those apps. (For instance, it will inform you of which 3rd party services an employee may be using without authorization).
• You now get the “P2” Version of Azure Information Protection. It adds automatic classification to your feature list. This means documents can be automatically encrypted, rather than the only available “manual” encryption method in P1.