Resource

Microsoft 365 licensing tiers explained

Most businesses are either paying for capability they never switched on, or paying twice for capability they already own. Licensing review is the least interesting work available and reliably one of the best returns, because the savings are recurring.

The tiers, in practical terms

The meaningful jump is from Standard to Business Premium, and it is about device management more than anything with security in the name.

Microsoft 365 tiers and their typical fit
Tier	What it adds	Who it suits
Business BasicLight users, shared devices, frontline roles	Web and mobile apps only, no desktop Office	Light users, shared devices, frontline roles
Business StandardGeneral office use with no additional security requirement	Adds desktop Office applications	General office use with no additional security requirement
Business PremiumMost small businesses that take security seriously	Adds device management, advanced threat protection and information protection	Most small businesses that take security seriously
Enterprise E3Businesses above the small business seat limit	Business Premium scale features without the seat ceiling	Businesses above the small business seat limit
Enterprise E5Regulated environments and larger security requirements	Adds advanced security, compliance and analytics	Regulated environments and larger security requirements

Feature allocation between tiers changes periodically. Confirm the current position before purchasing.

Five ways businesses pay twice

Paying for Business Premium and separately for a third party endpoint protection product doing the same job
Buying standalone device management when Intune is already in the licence
Third party email filtering alongside the advanced threat protection already included
A separate password or identity product where conditional access would cover the requirement
Standalone archiving where retention policies already included would serve

Consolidating in either direction is nearly always cheaper than running both. What matters is choosing deliberately rather than accumulating products because each was bought at a different time by a different person solving a different problem.

Licensed is not the same as deployed

The most common finding in a licensing review is not overspend on the wrong tier. It is a business paying for Business Premium and using roughly the same features it had on Standard.

Device management sits unused. Conditional access is unconfigured. Information protection has never been switched on. The licence cost is fully paid and a substantial part of the value is unclaimed.

This is worth checking before buying anything additional, because the capability solving your next problem is frequently already on the invoice.

Common questions

Answered before you ask.

What is the 300 seat limit?

Microsoft's small business plans are capped at 300 seats each. A business approaching that ceiling has to plan a move to the enterprise plans, which changes both the pricing model and some of the feature set. It is worth planning ahead of the ceiling rather than at it, because the migration is straightforward when scheduled and disruptive when forced by a hiring round.

Is Business Premium worth the step up from Standard?

For most businesses with a compliance obligation, a cyber insurance policy or staff working outside one office, yes, and the reason is device management rather than the headline security features. Intune is what lets you enforce encryption, require a compliant device before it can reach company data, and wipe a lost laptop. Buying that capability separately usually costs more than the tier difference, which is why the comparison should be against your total spend rather than against Standard alone.

Do we need E5?

Most small and medium businesses do not, and it is frequently oversold. E5 makes sense where a compliance framework specifically requires capabilities only available in it, or where the security operations tooling will genuinely be used rather than merely licensed. A common and more sensible pattern is a lower tier for the whole business with a small number of E5 licences for the roles that need them, since Microsoft permits mixing.

How often should licensing be reviewed?

Annually at minimum, and before any renewal. Two things drift: licences assigned to people who have left, which is pure waste, and tier mismatches where the business bought uniformly when only a subset needed the higher tier. A review is an afternoon of work and it regularly pays for a meaningful share of a year's IT spend, which makes it the first thing worth doing before any conversation about buying something new.

Microsoft 365 management

Tenant hardening, device management, licensing and the backup gap.

Cybersecurity services

Endpoint detection, email security, monitoring and user training.