E1 vs E3 vs E5, Frontline F1/F3, Business plans, add-on strategy (Copilot, Defender, Power BI, Teams Phone), role-based assignment, cost optimisation, and EA negotiation guidance for CIOs, procurement, and ITAM teams.
Enterprise “E” plans are designed for organisations with over 300 users or complex requirements. The three tiers (E1, E3, and E5) represent dramatically different feature sets and cost points. Understanding the precise differences is essential for role-based assignment and cost optimisation.
| Capability | E1 (~$10/user/mo) | E3 (~$36/user/mo) | E5 (~$57/user/mo) |
|---|---|---|---|
| Office apps | Web and mobile only | Full desktop apps (5 devices per user) | Full desktop apps (5 devices per user) |
| Exchange mailbox | 50 GB | 100 GB + unlimited archive | 100 GB + unlimited archive |
| OneDrive storage | 1 TB | 1 TB (expandable) | 1 TB (expandable) |
| Teams | Full | Full | Full + Phone System + Audio Conferencing |
| Identity and access | Basic Azure AD | Azure AD Premium P1 + Intune | Azure AD Premium P2 + PIM + Identity Protection |
| Threat protection | Exchange Online Protection only | EOP + basic DLP | Full Defender suite (Endpoint, O365 P2, Identity, Cloud App Security) |
| Compliance | Basic | Legal hold, basic eDiscovery | Advanced eDiscovery, Audit, Records Mgmt, Insider Risk |
| Analytics | None | None | Power BI Pro included |
| Windows Enterprise | Not included | Included (upgrade rights) | Included (upgrade rights) |
| Best for | Light users: email, Teams, web Office | Standard knowledge workers: majority of enterprise | Regulated industries, security-intensive, telephony needs |
“E5 is not a compliance strategy. It is a feature bundle. If only 20% of your users need advanced security and compliance features, assigning E5 to the entire organisation wastes $21/user/month on the remaining 80%. The savings from targeted E5 assignment can fund the features you actually need through add-ons.”
Frontline “F” plans target non-desk workers: retail staff, factory workers, nurses, drivers, field technicians. They primarily need communication and basic access rather than full productivity tools. In enterprises with large frontline populations, F plans are the single most impactful cost optimisation lever.
Microsoft 365 F1 ($2.25/user/month). The lightest enterprise licence. Provides Teams (chat, meetings, limited channels), SharePoint intranet access, Viva Engage (company communications), and web-based viewing only of Office files. Exchange Online Kiosk mailbox (2 GB, Outlook web only, no desktop client). OneDrive limited to 2 GB. No Office apps, not even web editing. F1 is for employees who need to receive communications, view schedules, access company news, and participate in Teams chat. But do not create documents or send significant email. Ideal for shift workers on shared devices or personal mobile.
Microsoft 365 F3 ($8/user/month). Significant step up: includes web and mobile Office apps (Word, Excel, PowerPoint, no desktop installation), 2 GB mailbox with Outlook mobile, 2 GB OneDrive, Teams, and SharePoint. Critically, F3 includes Windows Enterprise E3 licence and basic device management (Intune). Ideal for shared workstation and company-issued tablet scenarios. Also includes Microsoft Defender endpoint protection optimised for lightweight/shared devices. F3 suits frontline workers who need to create and edit documents on mobile or web, participate in data entry, and use company-managed devices. Without requiring full desktop Office or large mailboxes.
Assigning F3 ($8) instead of E3 ($36) to 10,000 frontline workers saves $280,000 per month, or $3.36 million per year. Assigning F1 ($2.25) instead of E3 saves $4.05 million per year for the same population. In enterprises with large operational workforces (retail, manufacturing, healthcare, logistics), frontline plan optimisation is typically the single largest Microsoft licensing cost reduction opportunity.
Our independent Microsoft advisory team conducts role-based plan assessments, builds optimised plan mixes, negotiates EA-specific discounts per SKU, evaluates Copilot ROI, and secures contractual flexibility. Fixed-fee engagements with guaranteed ROI. Typical outcomes: 20 to 35% reduction in total Microsoft spend.
Microsoft EA Optimisation Service →Microsoft 365 Business plans (Basic, Standard, Premium) are capped at 300 users per plan. Designed for SMBs but occasionally relevant for enterprise subsidiaries, pilot groups, or smaller divisions.
| Business Plan | Price/User/Mo | Office Apps | Security Level | Enterprise Equivalent |
|---|---|---|---|---|
| Business Basic | $6 | Web and mobile only | Basic | Similar to E1 (lower price, 300-cap) |
| Business Standard | $12.50 | Full desktop apps | Basic | Office 365 E3 features without EMS security |
| Business Premium | $22 | Full desktop apps | Azure AD P1, Intune, Defender for Business | Approx. E3 + partial E5 Security at $14 less |
Business Premium ($22) delivers E3-equivalent productivity plus partial E5 security, at $14/user/month cheaper than E3 ($36). For enterprise subsidiaries under 300 users, this can represent significant savings. Evaluate whether subsidiary users can operate within the Business Premium feature set before defaulting to Enterprise plans.
Microsoft offers individual add-ons that can be layered onto lower-tier plans, creating a “build your own E5” approach. This is often more cost-effective than blanket E5 assignment when only a subset of E5 features is needed.
| Add-On | Price/User/Mo | Base Requirement | CIO Guidance |
|---|---|---|---|
| Microsoft Copilot | $30 | E3 or E5 | Do not blanket-deploy. Pilot with 5 to 10% of users. A 20,000-user org deploying to 2,000 users (vs all) saves $6.48M/year. Negotiate as separate EA line item. |
| Defender Suite | Varies | E3 | Individual Defender products (Endpoint P2, O365 P2, Identity, Cloud App Security) as add-ons to E3 for the subset needing advanced protection. Often cheaper than upgrading all users to E5. |
| Power BI Pro | $10 | E3 | If only 1,000 of 10,000 users need Power BI, adding to E3 ($10K/mo) is dramatically cheaper than upgrading all to E5 ($210K/mo additional). |
| Teams Phone | $8–$15 | E3 | If only 5,000 of 20,000 users need telephony, add to E3 rather than E5 for all. Evaluate Direct Routing or Operator Connect for further voice savings. |
Use our Microsoft assessment tools to evaluate your current plan assignments, identify over-licensed users, model the cost impact of role-based plan optimisation, and benchmark your EA pricing against comparable enterprises.
Start Free Assessment →The most powerful Microsoft 365 cost optimisation strategy is assigning plans by role rather than by organisation. Microsoft supports mix-and-match licensing within the same tenant. There is no requirement for every user to be on the same plan.
| User Segment | Recommended Plan | Price/User/Mo | Key Capabilities Matched |
|---|---|---|---|
| Executives and senior leadership | E5 + Copilot | $87 | Full security, analytics, telephony, AI assistance |
| IT, security, compliance | E5 | $57 | Full Defender suite, eDiscovery, audit, PIM |
| Knowledge workers (standard) | E3 | $36 | Desktop apps, 100 GB mail, Intune, Azure AD P1 |
| Light users (email/Teams only) | E1 | $10 | Web Office, Teams, email. No desktop apps. |
| Frontline: data entry, tablets | F3 | $8 | Web/mobile Office, Teams, Windows Enterprise |
| Frontline: communication only | F1 | $2.25 | Teams chat, SharePoint view, schedule access |
500 E5 + 1,000 E5+Copilot + 8,500 E3 + 2,000 E1 + 5,000 F3 + 3,000 F1 = approximately $23/user blended vs $36 flat E3 = $3.1M/year savings. Role-based assignment is the single most effective Microsoft licensing cost optimisation strategy available to CIOs.
1. Resist blanket E5 pressure. Microsoft’s sales team is incentivised to drive E5 adoption across your entire organisation. The pitch: “E5 includes everything. It is simpler.” The reality: for a 20,000-user organisation, blanket E5 ($57) vs optimised mix ($23 blended) costs an additional $8.16 million per year. Counter with data: present your role-based analysis showing exactly which users need E5 features and which do not.
2. Negotiate plan-specific discounts. Microsoft’s EA discount structures allow different discount levels per SKU. Negotiate E3, E5, and F-plan discounts as separate line items rather than accepting a single blended discount. Larger E3 volumes should command deeper discounts (this is your highest-volume SKU). F-plan volumes, while lower per-user cost, still represent significant total spend. Negotiate volume discounts for F3 and F1 separately.
3. Secure Copilot pilot-to-expansion rights. Do not commit to full Copilot deployment at EA renewal. Instead, negotiate pilot terms: a defined number of Copilot licences (5 to 10% of E3/E5 users) at a negotiated rate, with contractual rights to expand at the same rate if the pilot demonstrates measurable ROI. This protects against Copilot price increases during the EA term.
4. Include step-up and step-down rights. Negotiate the ability to move users between plans during the EA term without penalty. If you initially assign 2,000 users to E5 but discover that 500 of them only need E3, you should be able to step-down those 500 users at the next anniversary. Similarly, if a regulatory change requires more users on E5, step-up rights at the negotiated rate protect you from list-price purchases mid-term.
Classify your workforce by role. Map every user segment to a plan tier based on actual feature requirements, not organisational default or “what they had before.”
Default to E3, not E5. E3 covers the needs of 70 to 80% of knowledge workers. Upgrade to E5 only where advanced security, compliance, telephony, or analytics are genuinely required.
Deploy F-plans aggressively for frontline. Every user moved from E3 to F3 saves $28/month; from E3 to F1 saves $33.75/month. For large frontline populations, this is your biggest savings lever.
Use add-ons instead of blanket upgrades. Defender, Power BI, Teams Phone, and Copilot are all available as add-ons to E3. Assign them only to users who need them.
Pilot Copilot before committing. At $30/user/month, Copilot is too expensive for blanket deployment without proven ROI. Start with 5 to 10% of users, measure productivity impact, then decide.
Negotiate plan-specific discounts in your EA. Different discount levels per SKU (E1, E3, E5, F1, F3) optimise your blended cost more effectively than a single discount rate.
Include step-up/step-down flexibility. Your plan mix will change during the EA term. Ensure you can adjust without penalty.
Engage independent advisory. Microsoft’s sales team is incentivised to sell E5 and Copilot. Independent advisors provide unbiased analysis, benchmark data, and negotiation support that consistently reduces total Microsoft spend by 20 to 35%.
| Industry | Typical Optimised Mix | Blended Savings vs Flat E3 | Key Driver |
|---|---|---|---|
| Healthcare | 15% E5, 25% E3, 10% F3, 50% F1 | ~55% below blanket E3 | 60 to 70% frontline workforce (nurses, technicians, support staff) |
| Manufacturing | 5% E5, 15% E3, 20% F3, 60% F1 | 60 to 70% reduction | Largest frontline populations (production floor, logistics, warehouse) |
| Financial Services | 30% E5, 40% E3, 15% F3, 15% F1 | 20 to 30% savings | Highest security/compliance requirements tilt mix toward E5 |
| Retail | 3% E5, 10% E3, 7% F3, 80% F1 | 80%+ savings | Most dramatic frontline-to-corporate ratio (80 to 90% store staff) |
Healthcare. Healthcare organisations typically have a 60 to 70% frontline workforce (nurses, technicians, support staff) who are ideal candidates for F1 or F3 plans. Clinical staff who use shared workstations for charting and scheduling fit the F3 profile. Administrative and billing staff need E3 for full desktop apps and Exchange. Compliance teams (HIPAA officers, legal) may require E5 for advanced eDiscovery, Audit, and Insider Risk management.
Manufacturing. Manufacturing enterprises have the largest frontline populations: production floor workers, logistics staff, quality inspectors, warehouse operators. F1 is appropriate for workers who need only Teams communication, shift schedules, and company news. F3 for supervisors and quality inspectors who need data entry and document editing on tablets. Engineering and design teams need E3 or E5 depending on IP protection requirements.
Financial services. Regulated financial institutions face the highest security and compliance requirements, which tilts the mix toward E5 for a larger percentage of users than other industries. Traders, advisors, compliance officers, and IT security teams need the full Defender suite, Azure AD P2 for PIM, and advanced Purview compliance tools. General banking staff and relationship managers typically need E3. Branch staff and call centre agents can operate on F3.
Retail. Retail organisations often have the most dramatic frontline-to-corporate ratio: 80 to 90% of employees work in stores, distribution centres, or customer service. Store associates need F1 at most (Teams for shift communication, schedule access). Store managers and regional leaders need F3 or E3 depending on reporting requirements. A blended cost of approximately $5 to $7/user/month is achievable versus $36 for flat E3, representing savings of 80%+ for a 50,000-employee retailer.
E5 includes everything in E3 plus: the full Microsoft Defender suite (Endpoint, Office 365 P2, Identity, Cloud App Security), Azure AD Premium P2 (with Privileged Identity Management and Identity Protection), advanced Microsoft Purview compliance tools (advanced eDiscovery, Audit, Records Management, Insider Risk), Power BI Pro for all users, and Teams Phone System with Audio Conferencing. The price difference is approximately $21/user/month ($36 for E3 vs $57 for E5). For a 20,000-user organisation, the annual cost difference between blanket E3 and blanket E5 is $5.04 million. Most enterprises find that only 10 to 25% of users genuinely need the E5 feature set. The rest are appropriately served by E3 with targeted add-ons where needed.
Yes. Microsoft fully supports mix-and-match licensing within the same tenant. You can assign E1, E3, E5, F1, F3, and even Business plans to different users based on their role and requirements. This is the recommended approach for cost optimisation: assign each user segment the most cost-effective plan that meets their needs. The blended per-user cost of an optimised mix is typically 30 to 50% lower than assigning a single plan (usually E3 or E5) to the entire organisation.
Use F1 ($2.25/user/month) for frontline employees who need only basic communication: Teams chat, SharePoint intranet access, company news, and calendar/schedule viewing. F1 provides no Office editing capability and a minimal 2 GB mailbox. Use F3 ($8/user/month) when frontline workers need to create or edit documents (web/mobile Office apps), participate in data entry, or use company-managed Windows devices (F3 includes Windows Enterprise E3). The key question: does this worker need to create content or just consume it? If consume only, F1. If create/edit, F3.
No. At $30/user/month, blanket Copilot deployment is almost never justified without proven ROI data. Copilot requires an E3 or E5 base licence, bringing the total to $66 to $87/user/month. The recommended approach: pilot Copilot with 5 to 10% of users (targeting knowledge workers, content creators, executives, and roles with high document/email volume) for 3 to 6 months. Measure productivity improvements, time savings, and user adoption. Then make a data-driven decision about expansion. A 20,000-user org deploying Copilot to 2,000 users (vs all) saves $6.48 million annually.
It depends on what percentage of users need the advanced features. The E3-to-E5 uplift is approximately $21/user/month. If you need multiple E5-exclusive features (Defender suite, Azure AD P2, advanced compliance, Power BI, Phone System) for a user, E5 is typically cheaper than purchasing each add-on individually. However, if only 1 to 2 features are needed (e.g., only Defender for Endpoint), the add-on approach for a subset of users is almost always cheaper than upgrading the entire population. Rule of thumb: if fewer than 25 to 30% of users need the E5 feature set, add-ons on E3 are more cost-effective. If 50%+ need most E5 features, blanket E5 may be simpler and cheaper.
As of 2024, Microsoft offers Enterprise plan versions without Teams (reflecting regulatory unbundling in some regions, primarily the EU). These plans have slightly lower base prices but require a separate Teams Enterprise licence ($5/user/month) if you need Teams functionality. For most organisations, the combined cost (plan without Teams + Teams licence) is equal to or slightly higher than the standard plan with Teams included. Unless you are in a jurisdiction where the unbundled version is required or you genuinely do not need Teams, the standard plans with Teams included remain the better value.
Five key tactics. First, negotiate discount levels per SKU rather than a single blended rate. Your highest-volume SKU (likely E3) should command the deepest discount. Second, present your role-based plan assignment analysis to counter Microsoft’s E5 upsell. Show exactly which users need which plan and why. Third, negotiate step-up and step-down rights to adjust the plan mix during the EA term without penalty. Fourth, secure Copilot at pilot pricing with contractual expansion rights at locked rates. Fifth, include true-down provisions for F-plan populations that may fluctuate seasonally. Independent advisory consistently delivers 20 to 35% reductions in total Microsoft spend through these and other negotiation strategies.
Microsoft’s sales team is incentivised to sell E5 and Copilot to your entire organisation. The difference between an optimised plan mix and blanket E5 can exceed $8 million annually for a 20,000-user enterprise. Our independent Microsoft advisory team provides role-based plan assessments, add-on economics analysis, Copilot ROI evaluation, and EA negotiation support that consistently delivers 20 to 35% reductions in total Microsoft spend.