Microsoft licensing · Module 3
Which Microsoft 365 plan fits
which user?
Not everyone in an organisation needs the same Microsoft 365 plan. The right choice depends on whether someone mainly reads email, works in an office, works on the move, or needs additional security and AI capabilities.
The key distinction
The right licence fits the person—and the organisation's strategy.
First identify the capabilities a user actually needs. Then check the security requirements and whether any planned add-on has an eligible base licence.
- 01Business: no more than 300 provisioned licences in total
- 02Frontline: F1 and F3 as the base; F5 supplements eligible licences
- 03Enterprise: for broader needs and organisational requirements
- 04Copilot: distinguish existing capabilities from additional licences
Explained simply · The essential terms
Not every user needs the same plan
The right licence depends on a person's responsibilities and the organisation's security requirements.
Business plans
Plans for smaller and medium-sized organisations; the Business family has a combined limit of 300 licences.
Frontline plans
Licences for eligible roles that often involve mobile work or shared devices.
Prerequisite
A base licence or another requirement that must be met before an add-on can be used.
A practical example: A manufacturing employee needs different capabilities from someone in the finance department. Both must still meet the organisation's security requirements.
01 · Start with the usage scenario
Four user groups—four different starting points
Avoid selecting plans solely by job title. Mixed models are possible when every user is appropriately licensed and organisation-wide security and compliance requirements are also satisfied.
Small and medium-sized organisations
Business plans combine email, collaboration and—depending on tier—desktop apps, device management, and security. The tenant is limited to 300 provisioned Business licences across the family.
Mobile or device-sharing employees
F1 and F3 are designed for roles serving customers, patients, production, or logistics, often using mobile or shared devices.
Knowledge and office work
Enterprise plans support organisations of any size and users requiring broad productivity, identity, device, security, or compliance capabilities.
Copilot users
Copilot Chat may already be available with an eligible Microsoft 365 subscription. Organisational grounding and deep app integration require an appropriate paid Copilot user licence.
02 · Business plans
Basic, Standard, and Premium—with one shared 300-seat limit
Microsoft designs the Business base plans for organisations with up to 300 users. A maximum of 300 seats may be provisioned across the Business family in total—not 300 per plan.
| Plan | Office apps | Email & files | Management & protection | Typical need |
|---|---|---|---|---|
| Business Basic | Web and mobile; no full desktop apps | Exchange Plan 1, SharePoint, 1 TB OneDrive | Core identity and baseline protection | Cloud-first, browser and mobile work |
| Business Standard | Desktop, web, and mobile | Same as Basic | Core identity and baseline protection | Adds locally installed Office apps |
| Business Premium | Desktop, web, and mobile | Same as Standard | Entra ID P1, Intune, Defender for Business, and Defender for Office 365 P1 | Managed devices, Conditional Access, and stronger protection |
If 250 Business Premium licences are provisioned, generally only 50 further Business seats can be provisioned across the whole Business family. Organisations above 300 users should assess Enterprise plans. Microsoft 365 Apps for business is an apps-focused offer without a full email and communications suite and is also subject to the Business limit.
03 · Frontline plans
F1 and F3 are role licences—F5 adds targeted protection
Frontline offers support a frequently mobile workforce working directly with customers, patients, guests, production, or the flow of goods. They are not a default substitute for information-worker plans.
| Plan | Apps | Email & storage | Management & Windows | Suitable when … |
|---|---|---|---|---|
| Microsoft 365 F1 | Read-only Office for the web; no full desktop apps | No mailbox rights; 2 GB OneDrive | Entra ID P1 and Intune for Frontline scenarios | Communication and information access are the priority |
| Microsoft 365 F3 | Web and mobile; no full desktop apps | Exchange Kiosk, 2 GB OneDrive | Entra ID P1, Intune, and limited Windows rights for Frontline scenarios | Email, editing, automation, and device management are also required |
Microsoft lists, among others, users whose primary device has one integrated screen smaller than 10.9 inches, or users who share their primary work device with other licensed Frontline users during or across shifts. The real work profile must also fit the Frontline model. Current Product Terms and the exact SKU remain authoritative.
F5 is not a standalone complete base plan here. It refers to Frontline add-ons such as Microsoft Defender Suite FLW, Microsoft Purview Suite FLW, or Microsoft Defender + Purview Suite FLW. Eligible bases are Microsoft 365 F1, Microsoft 365 F3, or Office 365 F3 combined with Enterprise Mobility + Security E3 (K).
04 · Enterprise plans
Do not blend Office 365 E1–E5 with Microsoft 365 E3–E7
Enterprise offers have no 300-user cap. Office 365 focuses on productivity and cloud services; Microsoft 365 adds Windows, identity, device, and security rights depending on plan.
| Plan | Core scope | Desktop apps | Key distinction |
|---|---|---|---|
| Office 365 E1 | Exchange, SharePoint, OneDrive, and web apps | No | Cloud productivity without a Windows and EMS bundle |
| Office 365 E3 | E1 plus desktop apps, Exchange Plan 2, and broader compliance | Yes | Includes Defender for Office 365 P1 since July 2026; not a full Windows/EMS suite |
| Office 365 E5 | E3 plus more advanced security, compliance, analytics, and communications | Yes | Power BI Pro; PSTN use may require further licences |
| Microsoft 365 E3 | Office 365 E3 plus Windows Enterprise and EMS E3 | Yes | Entra ID P1, Intune, and Defender for Office 365 P1 since July 2026 |
| Microsoft 365 E5 | E3 plus Entra ID P2 and broader Defender and Purview capabilities | Yes | Microsoft Copilot generally remains an add-on |
| Microsoft 365 E7 | E5 plus Microsoft Copilot, Entra Suite, and Agent 365 | Yes | Generally available since 1 May 2026 |
E1 is an Office 365 plan; there is no corresponding Microsoft 365 E1 in the current commercial Enterprise portfolio. Enterprise suites also exist with and without Teams, so always inspect the full order description.
05 · Strategy & add-ons
The correct foundation also depends on security and compliance goals
The user role answers which applications are needed. Organisation-wide security and compliance requirements, as well as the prerequisites for Defender, Purview, and Frontline add-on suites, also determine which base licence actually fits.
| Starting licence | Add-on or capability | Important prerequisite |
|---|---|---|
| Office 365 E1 / Exchange Online | No enterprise Defender Suite or Purview Suite | E1 or a mailbox alone does not meet the E3 suite prerequisite. Individual standalone products may follow different rules. |
| Office 365 E3 | Microsoft Defender Suite / Microsoft Purview Suite | Enterprise Mobility + Security E3 is also required. |
| Microsoft 365 E3 | Microsoft Defender Suite / Microsoft Purview Suite | The suite already includes Office 365 E3 and EMS E3 and therefore satisfies the required foundation. |
| Microsoft 365 F1 / F3 | Defender Suite FLW / Purview Suite FLW / combined FLW suite | An eligible Frontline base and a qualifying Frontline worker profile are required. |
| Office 365 F3 | Frontline security and compliance add-ons | Enterprise Mobility + Security E3 (K) is also required. |
| Business Basic / Standard | No Defender or Purview suite for Business Premium | The specific Business Premium add-on suites require Microsoft 365 Business Premium as the base. |
| Microsoft 365 Business Premium | Defender Suite / Purview Suite for Microsoft 365 Business Premium | Use only the suite explicitly intended for Business Premium. |
| Office 365 E5 / Microsoft 365 E5 | Advanced security and compliance capabilities | Before purchasing more, check which required capabilities are already included in the respective suite. |
An employee may only need Exchange. However, if the organisation's strategy requires additional security or compliance capabilities—such as Customer Key or Customer Lockbox—the user's base licence must also support the required add-on. Office 365 E1, for example, does not qualify as a foundation for Microsoft Purview Suite.
06 · Copilot licensing
Copilot Chat, Copilot Business, and Microsoft Copilot are not the same
The included chat entry point and the paid user licence differ primarily in organisational grounding, app integration, and supported agent scenarios.
Web-grounded chat entry point
Copilot Chat is available without an additional user fee to Entra ID users with an eligible Microsoft 365 subscription. Web chat uses internet sources. Agents can require an Azure subscription and metered billing.
Add-on for Business customers
Copilot Business provides the same core capabilities as Microsoft Copilot and supports up to 300 seats per tenant. The Business FAQ lists Basic, Standard, and Premium as eligible bases; the broader Copilot licensing overview additionally includes Microsoft 365 Apps for business. Because these sources differ, verify the exact SKU and contractual terms.
Paid user licence
The user licence adds work context and supported Microsoft 365 app experiences. Core eligible plans include Microsoft 365 E3, E5, F1, F3, Business plans, and Office 365 E1, E3, E5, and F3. An eligible F1 base does not automatically grant mailbox or desktop-app rights.
Copilot included
Microsoft 365 E7 includes Microsoft Copilot together with Microsoft 365 E5, Entra Suite, and Agent 365. Copilot remains a separate addition to E3 and E5.
07 · Prerequisites
A SKU alone does not make Copilot deployment-ready
Licence assignment and technical deployment require several layers to be satisfied together.
- 01Verify an eligible base licence for every Copilot user—not only at tenant level.
- 02Provide a Microsoft Entra ID account for identity and sign-in.
- 03Host the primary mailbox in Exchange Online when Copilot should use email and calendar data; on-premises and hybrid mailboxes do not support this grounding.
- 04Meet supported operating system, browser, mobile device, and network endpoint requirements.
- 05Review SharePoint permissions, data quality, sharing, and oversharing before rollout.
- 06Plan Purview labelling, governance, a pilot group, and phased adoption.
- 07For agents, also assess harness, channel, identity, trigger, and Copilot Credits or pay-as-you-go.
08 · Decision guide
Which plan is often the most sensible starting point?
These examples provide orientation, not an automatic licensing recommendation. Required features, agreement, region, and exact order remain decisive.
Business Basic
When email, files, collaboration, and web apps are sufficient and full desktop apps are not required.
Business Standard or Office 365 E3
When locally installed Office apps are required but device management and advanced security are handled separately.
Business Premium
When up to 300 users also need Intune, Conditional Access, and integrated endpoint protection.
F1 or F3
When the role and device scenario meet Frontline conditions; choose F3 when mailbox, editing, and management needs are higher.
Microsoft 365 E3 or E5
E3 as a broad baseline for information work and managed devices; E5 for advanced identity, security, and compliance requirements.
Copilot add-on or E7
Use an add-on for selected eligible users; consider E7 when E5, Copilot, Entra Suite, and agent governance are needed together.
Remember
User role, organisational strategy, base licence, and add-ons must fit together.
A defensible licensing decision connects individual needs with organisation-wide security and compliance requirements, tenant-wide capabilities, and valid product prerequisites. The cheapest individual licence does not always fit the overall strategy—and not every add-on suite fits every base.
Primary and official sources
Current, verified, and traceable.
The statements were checked against official Microsoft sources as of 22 August 2026. Product scope, rollout, availability, and conditions can change; the exact SKU, agreement, and applicable Product Terms remain authoritative.
- 01Microsoft Learn — Microsoft 365 and Office 365 plan options↗Open source
- 02Microsoft — Modern Work Plan Comparison for SMB↗Open source
- 03Microsoft — Microsoft 365 Business plans↗Open source
- 04Microsoft — Microsoft 365 Frontline plans↗Open source
- 05Microsoft Learn — Frontline worker user types and licensing↗Open source
- 06Microsoft Learn — Frontline licence eligibility conditions↗Open source
- 07Microsoft — Microsoft 365 Enterprise plans↗Open source
- 08Microsoft Learn — License options for Microsoft Copilot↗Open source
- 09Microsoft Learn — Minimum requirements for Microsoft Copilot↗Open source
- 10Microsoft Learn — Microsoft Copilot Business FAQ↗Open source
- 11Microsoft Learn — Microsoft 365 E3, E5, and E7 compared↗Open source
- 12Microsoft — Subscription suites and add-on prerequisites↗Open source
- 13Microsoft Learn — Microsoft Purview tenant-level licensing↗Open source
- 14Microsoft Learn — Minimum requirements for Copilot Chat↗Open source
- 15Microsoft Learn — Defender for Office 365 service description↗Open source
Note: This article provides accessible professional orientation, not legal or individual licensing advice. Review current Product Terms, service descriptions, agreement documents, and the actual user population before purchasing or changing licences.
Complete learning pathUnderstand Microsoft licensing from the ground up
Return to the ten-module overview—from foundations to compliance and a defensible licence position.