Find E5 Users Without Microsoft 365 Copilot Licenses

Find E5 users without Copilot via the Microsoft 365 Admin Center

The admin center does not offer a native "E5 minus Copilot" report, but you can approximate this list by cross-referencing two license views and exporting to Excel.

Step 1: Export the list of E5 users

1. Sign in to the Microsoft 365 Admin Center as a Global Reader or License Administrator.
2. Navigate to Billing → Licenses.
3. Locate Microsoft 365 E5 (or your tenant's E5 variant) in the list and click it.
4. On the license detail page, click the Assigned users tab.
5. Click Export users to download a CSV of every user with this SKU. Save as e5-users.csv.

Step 2: Export the list of Copilot users

1. Return to Billing → Licenses.
2. Click Microsoft 365 Copilot.
3. Click the Assigned users tab, then Export users. Save as copilot-users.csv.

Step 3: Compare the two lists in Excel

1. Open both CSV files in Excel.
2. In e5-users.csv, add a new column HasCopilot.
3. Use a VLOOKUP or XLOOKUP formula against the UPN column of copilot-users.csv:
   

   =IF(ISNA(VLOOKUP(A2, 'copilot-users.csv'!A:A, 1, FALSE)), "No", "Yes")

4. Filter the HasCopilot column to No. The remaining rows are your E5 users without Copilot.
5. Sort by department and review before taking action.

Step 4 (optional): Review in Microsoft Entra

1. For any user on the list, open Microsoft Entra admin center.
2. Navigate to Identity → Users → All users, search for the user, then open Licenses to verify assignment source (direct vs. group-based) before making changes.

This manual path is acceptable for small tenants but becomes error-prone beyond a few hundred users. Use the API or script approach for anything at scale.

Find E5 users without Copilot via Microsoft Graph

The query requires three Graph calls and client-side filtering (Graph does not support a "has SKU A but not SKU B" filter directly).

Step 1: List subscribed SKUs to get SKU IDs

GET https://graph.microsoft.com/v1.0/subscribedSkus?$select=skuId,skuPartNumber,consumedUnits,prepaidUnits

Look for entries where skuPartNumber matches E5 (SPE_E5, ENTERPRISEPREMIUM) and Copilot (Microsoft_365_Copilot). Record the GUIDs in skuId.

Example response (truncated)

{
  "value": [
    {
      "skuId": "06ebc4ee-1bb5-47dd-8120-11324bc54e06",
      "skuPartNumber": "SPE_E5",
      "consumedUnits": 83
    },
    {
      "skuId": "639dec6b-bb19-468b-871c-c5c441c4b0cb",
      "skuPartNumber": "Microsoft_365_Copilot",
      "consumedUnits": 58
    }
  ]
}

Step 2: List users assigned the E5 SKU

Use the assignedLicenses/any() filter with the E5 SKU ID from Step 1:

GET https://graph.microsoft.com/v1.0/users?$filter=assignedLicenses/any(x:x/skuId eq 06ebc4ee-1bb5-47dd-8120-11324bc54e06)&$select=id,displayName,userPrincipalName,accountEnabled,assignedLicenses,department,jobTitle&$top=999

Page through results using the @odata.nextLink value until exhausted.

Step 3: Filter client-side for users without the Copilot SKU

Graph does not support not any() negation across assignedLicenses, so filter in your code:

const e5WithoutCopilot = users.filter(u => {
  const skuIds = (u.assignedLicenses || []).map(l => l.skuId);
  return skuIds.includes(E5_SKU_ID) && !skuIds.includes(COPILOT_SKU_ID);
});

Step 4 (optional): Verify service plan detail

For any single user, confirm licensing details including service plans:

GET https://graph.microsoft.com/v1.0/users/{user-id}/licenseDetails

Throttling notes

• Use $top=999 to minimize pagination round trips.
• Expect Graph throttling above ~10,000 users — implement exponential backoff on HTTP 429 with the Retry-After header.
• Results are eventually consistent; a user whose license was changed in the last few minutes may not yet reflect in assignedLicenses.

Find E5 users without Copilot via PowerShell

The Microsoft Graph PowerShell SDK makes this a short, reliable script. The approach:

1. Connect to Graph with the required read scopes
2. Pull the SKU catalog and resolve the E5 and Copilot SKU IDs
3. Query all users assigned the E5 SKU (server-side filter for efficiency)
4. Filter client-side for the absence of the Copilot SKU
5. Export to CSV

Prerequisites

• PowerShell 7.x recommended
• Microsoft.Graph module: Install-Module Microsoft.Graph -Scope CurrentUser
• Delegated scopes: Organization.Read.All, User.Read.All

Inline example

# Connect with read scopes
Connect-MgGraph -Scopes "Organization.Read.All", "User.Read.All"

# Resolve SKU IDs dynamically (don't hardcode GUIDs)
$skus = Get-MgSubscribedSku -All
$e5Sku = $skus | Where-Object { $_.SkuPartNumber -in 'SPE_E5','ENTERPRISEPREMIUM' } | Select-Object -First 1
$copilotSku = $skus | Where-Object { $_.SkuPartNumber -like '*Copilot*' } | Select-Object -First 1

# Get E5 users via server-side filter
$e5Users = Get-MgUser -All -Filter "assignedLicenses/any(x:x/skuId eq $($e5Sku.SkuId))" `
    -Property Id,DisplayName,UserPrincipalName,AccountEnabled,AssignedLicenses,Department,JobTitle

# Filter client-side for users WITHOUT Copilot
$result = $e5Users | Where-Object {
    $_.AssignedLicenses.SkuId -notcontains $copilotSku.SkuId
}

$result | Export-Csv '.\E5-Users-Without-Copilot.csv' -NoTypeInformation

Use the downloadable script below for a production-ready version with parameter handling, progress indicators, and error handling.