Microsoft 365 Licensing
Microsoft 365 Licenses – Complete Guide
Understand every Microsoft 365 license plan — from small business to enterprise. Learn what’s included, how plans compare, and how to choose the right license for your organisation.
How Microsoft 365 Licensing Works
Microsoft 365 licenses are subscription-based plans that bundle cloud services — email, collaboration, security, and device management — into a single per-user monthly or annual cost.
🏢 License Families at a Glance
✅ Microsoft 365 Business — For organisations with up to 300 users
✅ Microsoft 365 Enterprise (E-plans) — For large organisations with advanced security and compliance needs
✅ Microsoft 365 Frontline (F-plans) — For frontline workers with limited desktop access
✅ Microsoft 365 Education (A-plans) — For academic institutions
✅ Add-on Licenses — Individual services added on top of a base plan (e.g. Copilot, Defender, Visio)
Microsoft 365 Business Plans
Designed for small and medium-sized businesses with up to 300 users. Each tier adds more features and security capabilities.
Microsoft 365 Business Basic
Web and mobile versions of Office apps, Exchange Online (50GB mailbox), Teams, SharePoint, and OneDrive. No desktop Office apps.
Microsoft 365 Business Standard
Everything in Basic plus full desktop Office apps (Word, Excel, PowerPoint, Outlook) for up to 5 PCs/Macs and 5 mobile devices per user.
Microsoft 365 Business Premium
Everything in Standard plus advanced security — Microsoft Defender for Business, Intune device management, Azure AD Premium P1, and information protection.
Microsoft 365 Apps for Business
Desktop Office apps only (no email or Teams). Includes Word, Excel, PowerPoint, Outlook, Publisher, and Access for up to 5 devices per user.
Microsoft 365 Enterprise Plans
Built for large organisations with no user cap, offering the most comprehensive compliance, security, and productivity features.
Microsoft 365 E1
Web and mobile Office apps, Exchange Online (100GB mailbox), Teams, SharePoint, OneDrive. No desktop apps. Suitable for task workers with basic needs.
Microsoft 365 E3
Full desktop Office apps, Exchange Online, Teams, SharePoint, Intune, Azure AD Premium P1, data loss prevention, and eDiscovery. The most widely deployed enterprise plan.
Microsoft 365 E5
Everything in E3 plus Microsoft Defender for Office 365 Plan 2, Defender for Endpoint, Azure AD Premium P2, Purview compliance, Power BI Pro, and Audio Conferencing.
E3 vs E5 — Key Differences
E5 is a superset of E3, adding advanced security, compliance, and analytics tools.
| Feature | E3 | E5 |
|---|---|---|
| Desktop Office Apps | ✅ Yes | ✅ Yes |
| Exchange Online (100GB) | ✅ Yes | ✅ Yes |
| Microsoft Teams | ✅ Yes | ✅ Yes |
| Intune Device Management | ✅ Yes | ✅ Yes |
| Azure AD Premium P1 | ✅ Yes | ✅ Yes |
| Azure AD Premium P2 | ❌ No | ✅ Yes |
| Microsoft Defender for Office 365 P2 | ❌ No | ✅ Yes |
| Microsoft Defender for Endpoint P2 | ❌ No | ✅ Yes |
| Microsoft Purview Compliance | ⚡ Basic | ✅ Advanced |
| Power BI Pro | ❌ No | ✅ Yes |
| Audio Conferencing | ❌ No | ✅ Yes |
| Privileged Identity Management (PIM) | ❌ No | ✅ Yes |
Microsoft 365 Frontline Worker Plans (F-Plans)
Designed for shift workers, retail staff, and field employees who primarily work on shared or mobile devices.
Microsoft 365 F1
Teams (chat, meetings, calling), SharePoint, Yammer, Stream, and Power Apps. No Exchange Online mailbox — uses Exchange Online Kiosk (2GB). No desktop Office apps. Web-only access.
Microsoft 365 F3
Everything in F1 plus Exchange Online (2GB mailbox), Intune, Azure AD Premium P1, and Microsoft 365 Apps for web and mobile. Suitable for frontline workers needing email and device management.
Key Services Across Plans
Core services that appear across most Microsoft 365 plans, with varying feature levels depending on the tier.
📧 Exchange Online
- 50GB mailbox (Business) / 100GB (Enterprise)
- Shared mailboxes, distribution groups
- Anti-spam and anti-malware protection
- Litigation hold and eDiscovery (E3/E5)
- Archiving and retention policies
💬 Microsoft Teams
- Chat, meetings, and file collaboration
- Audio Conferencing included in E5
- Teams Phone (add-on required for most plans)
- Guest access and external federation
- Teams Rooms and devices support
🔐 Security & Identity
- Azure AD Free (all plans)
- Azure AD Premium P1 (Business Premium, E3+)
- Azure AD Premium P2 — PIM, Identity Protection (E5)
- Conditional Access policies (P1+)
- Multi-Factor Authentication (all plans)
📁 SharePoint & OneDrive
- 1TB OneDrive storage per user
- SharePoint team sites and communication sites
- Document versioning and co-authoring
- External sharing controls
- Advanced compliance (E3/E5)
💻 Intune & Device Management
- Mobile Device Management (MDM)
- Mobile Application Management (MAM)
- Windows Autopilot deployment
- App protection policies
- Included in Business Premium, E3, E5, F3
🛡️ Defender & Purview
- Defender for Office 365 P1 (Business Premium)
- Defender for Office 365 P2 (E5)
- Defender for Endpoint P2 (E5)
- Microsoft Purview — DLP, sensitivity labels
- eDiscovery and audit (E3/E5)
Common Add-On Licenses
Additional capabilities that can be purchased on top of any base Microsoft 365 plan.
Microsoft 365 Copilot
AI assistant integrated into Word, Excel, PowerPoint, Outlook, and Teams. Requires a qualifying base M365 plan (E3, E5, Business Standard, or Business Premium).
Teams Phone
Cloud PBX capabilities — make and receive PSTN calls directly within Microsoft Teams. Requires a separate calling plan or Direct Routing setup.
Azure AD Premium P2
Adds Privileged Identity Management (PIM), Identity Protection, and access reviews on top of P1 features. Available standalone or included in E5.
Power BI Pro
Share and collaborate on Power BI reports and dashboards. Included in E5, available as standalone add-on for other plans.
Visio & Project
Microsoft Visio for diagramming and Microsoft Project for project management, available as web-based add-on licenses independent of the M365 plan.
Microsoft Defender Add-ons
Defender for Business, Defender for Endpoint, Defender for Identity, and Defender for Cloud Apps available as standalone add-ons for plans that don’t include them.
⚡ Licensing Tip for Administrators
Always assign the minimum required license to each user type. Frontline workers do not need E3 — F3 covers their needs at a significantly lower cost. Use group-based licensing in Azure AD to assign licenses automatically via security groups, and leverage License Usage Reports in the Microsoft 365 Admin Center to identify and reclaim unused licenses.
🎓 Common Interview Questions — M365 Licensing
- What is the difference between Microsoft 365 E3 and E5?
- What is included in Microsoft 365 Business Premium that is not in Business Standard?
- What licenses are required to use Microsoft Copilot?
- What is the difference between Azure AD Premium P1 and P2?
- How does group-based licensing work in Azure AD?
- What is the maximum number of users for Microsoft 365 Business plans?
- What is the difference between F1 and F3 plans for frontline workers?
- Can you use Intune with a Microsoft 365 Business Basic license?
- What happens to a user’s mailbox when their license is removed?
- What is the difference between Microsoft 365 and Office 365 licensing?
Ready to Level Up Your M365 Skills?
Explore our free troubleshooting guides, PowerShell scripts, and real interview questions covering every Microsoft 365 service.