For organisations with large frontline populations (retail, healthcare, manufacturing, logistics, hospitality), frontline licence right-sizing is the single highest-ROI action available in Microsoft licensing. This guide dissects every difference between F1 and F3, identifies the decision criteria that determine which licence your workers actually need, and provides the implementation framework for reclaiming the budget your organisation is currently handing to Microsoft for no reason.
We analyse your frontline workforce licensing, identify every user on the wrong SKU, model the savings from F1/F3 migration, and build the implementation plan, typically delivering 40 to 70% cost reduction on frontline Microsoft spend. Get a Quote.
Frontline worker over-licensing is the most expensive default setting in enterprise Microsoft licensing. It persists because nobody is looking at it. When organisations deploy Microsoft 365, the initial licensing decision is typically made by IT or procurement based on the knowledge workforce: the people who need Outlook, Word, Excel, PowerPoint, Teams, SharePoint, and the full Microsoft collaboration stack. These workers need E3 or E5. The licence is deployed organisation-wide. And because it is easier to give everyone the same licence than to segment the workforce, every employee (including the nurse on the ward, the associate on the shop floor, the driver in the truck, and the operator on the assembly line) gets an E3.
Nobody notices because the per-user cost ($36/month) does not look large in isolation. But multiply it by 5,000, 10,000, or 50,000 frontline workers, and the aggregate waste is staggering. We have seen single-enterprise Microsoft bills inflated by $3 to $8 million annually because frontline workers who use Teams on a shared tablet and check a shift schedule are licensed with the same E3 subscription as the CFO who lives in Excel and PowerPoint twelve hours a day.
Microsoft created the F1 and F3 plans specifically for this population. They are purpose-built for workers who need communication, task management, and basic productivity, but not the full Office desktop suite, not 100GB mailboxes, not advanced compliance features, and not the entire collaboration stack that knowledge workers depend on. The F plans are not a compromise. They are a correct fit for a workforce segment that was never supposed to be on E3 in the first place.
The organisations most exposed to frontline over-licensing are those with the largest non-desk workforces: retail chains (60 to 80% frontline), hospital networks (50 to 70% frontline), manufacturing companies (40 to 60% frontline), logistics operators (50 to 70% frontline), and hospitality groups (70 to 90% frontline). If your organisation has more than 2,000 frontline workers, the probability that you are overspending by $500K+ annually on Microsoft licensing is extremely high. For the full SKU comparison including E3 and E5, see our Microsoft 365 E3 vs E5 vs F3 guide.
F1 is the minimum viable Microsoft licence for a frontline worker. At $2.25 per user per month ($27/year), it provides the essential communication and collaboration tools without any Office desktop applications.
Microsoft Teams: Full Teams access, including messaging, voice/video calling, meetings (with limits on meeting creation), channels, and the Teams mobile app. This is the anchor feature. For most frontline workers, Teams is the only Microsoft product they interact with daily: for shift handover notes, group chats, broadcast announcements, and video check-ins with management.
Office web and mobile apps: Browser-based and mobile access to Word, Excel, PowerPoint, and OneNote. Users can view, create, and edit documents, but only through the web browser or mobile app. No desktop Office applications are installed. For a nurse reviewing a protocol document or a warehouse worker checking an inventory spreadsheet, web/mobile access is sufficient. For a worker who needs to build complex Excel models or format 50-page Word documents, it is not.
Exchange Online (Kiosk): A 2GB mailbox (compared to 50GB on E3 and 100GB on E5). The 2GB mailbox is adequate for frontline workers who receive company announcements, shift-change notifications, and basic correspondence, but it fills quickly if the worker receives large attachments or is cc'd on high-volume distribution lists. No Outlook desktop app is included; email is accessed via Outlook on the web or mobile.
SharePoint and OneDrive: Access to SharePoint sites (read and contribute), but OneDrive storage is limited to 2GB per user. The OneDrive limit is F1's most significant practical constraint.
Microsoft Shifts: Shift scheduling, time clock, and task management. A critical frontline-specific feature included in both F1 and F3.
Security: Microsoft Entra ID P1 (conditional access, MFA), Microsoft Intune P1 (mobile device management), Microsoft Defender for Office 365 (basic threat protection). The security stack in F1 is not minimal. It includes the same identity and device management foundation as E3. For details, see our Entra ID licensing guide.
No Office desktop applications (Word, Excel, PowerPoint, Outlook for desktop). No 50/100GB mailbox (2GB only). No substantial OneDrive storage (2GB only). No Power BI Pro. No advanced compliance features (eDiscovery, DLP, Information Protection beyond basic). No Windows licence (F1 does not include Windows 10/11 Enterprise rights).
F3 costs $8.00 per user per month ($96/year), more than 3x the F1 price. The premium buys three significant upgrades that address F1's most material limitations.
F3 includes the right to use Office desktop applications (Word, Excel, PowerPoint, Outlook, Access, Publisher on PC), but with a critical restriction: desktop apps are available only on shared, non-personal devices. This means a frontline worker can use full desktop Excel on a shared workstation in the break room or a nursing station, but the licence does not cover installation on a personal laptop or home PC. For frontline workers who use shared company devices, this restriction is invisible. For workers who need Office on personal devices, F3 does not solve the problem (E3 or a Business plan is required).
F3 includes Windows 10/11 Enterprise E3 rights: the ability to upgrade managed devices from Windows Pro to Windows Enterprise, gaining BitLocker management, AppLocker, Windows Defender Credential Guard, and other enterprise security features. F1 does not include any Windows licensing. For organisations that need Enterprise-grade Windows security on frontline devices (kiosks, shared PCs, tablets), F3 eliminates the need for a separate Windows Enterprise subscription.
F3 provides a 10GB Exchange Online mailbox (vs F1's 2GB) and 2TB OneDrive storage (vs F1's 2GB). The OneDrive jump from 2GB to 2TB is the most dramatic practical difference between F1 and F3. It transforms OneDrive from unusable to fully functional for file storage and sync.
Power Apps and Power Automate (limited use rights), Microsoft Planner and To Do (task management), Microsoft Bookings (appointment scheduling, valuable for healthcare and service environments), and expanded compliance features including basic Data Loss Prevention (DLP) and sensitivity labelling.
| Feature | F1 ($2.25/user/mo) | F3 ($8.00/user/mo) | E3 ($36/user/mo) |
|---|---|---|---|
| Microsoft Teams | Full | Full | Full |
| Office web/mobile apps | View + edit | View + edit | View + edit |
| Office desktop apps | No | Shared devices only | Personal + shared (5 devices) |
| Exchange Online mailbox | 2 GB | 10 GB | 50 GB |
| OneDrive storage | 2 GB | 2 TB | 1 TB (expandable to 5 TB) |
| SharePoint access | Yes | Yes | Yes |
| Microsoft Shifts | Yes | Yes | Yes |
| Windows Enterprise rights | No | Yes (E3 level) | Yes (E3 level) |
| Intune (device management) | P1 | P1 | P1 |
| Entra ID (identity) | P1 | P1 | P1 |
| Power Apps / Power Automate | No | Limited | Full |
| Bookings | No | Yes | Yes |
| Basic DLP / sensitivity labels | No | Basic | Full |
| eDiscovery | No | No | Yes |
| Advanced compliance | No | No | Yes |
| Copilot eligibility | No | No | Yes |
| Annual cost per user | $27 | $96 | $432 |
| Cost per 10,000 users/year | $270,000 | $960,000 | $4,320,000 |
Licensing 10,000 frontline workers on E3 instead of F1 costs an additional $4.05 million per year. Even the F1-to-F3 upgrade, at $690,000 annually for 10,000 users, is only justified if the frontline population genuinely needs desktop Office apps, Windows Enterprise rights, or OneDrive storage. For the complete Microsoft 365 plan selection framework including E5, see our M365 enterprise plan selection playbook.
The F1 vs F3 decision is not about job title. It is about what the worker does with Microsoft products daily. Here are the six most common frontline personas and the licence each actually needs.
Role: Retail associate, warehouse operative, production line worker, hotel housekeeper. Usage: Teams chat, shift schedule via Shifts, occasional company announcements via Viva Engage, maybe reads a shared document once a week. Correct licence: F1. This worker never opens a desktop Office application, never sends more than a handful of emails per week, and never stores files in OneDrive. F1's 2GB mailbox and 2GB OneDrive are more than adequate. Assigning E3 to this persona is paying $432/year for $27 of value.
Role: Field service technician, delivery driver, construction foreman, agricultural inspector. Usage: Teams on a mobile phone, fills out simple forms or checklists in a mobile app, takes photos that upload to SharePoint, occasionally edits a document on the phone. Correct licence: F1. Mobile Office apps are included in F1. The photo upload workflow works through the Teams or SharePoint mobile apps without needing OneDrive.
Role: Nursing station clinician, call centre agent, bank teller, manufacturing quality inspector. Usage: Works at a shared workstation, needs desktop Excel or Word for data entry into structured spreadsheets or templates, accesses Outlook for email, uses Teams for internal communication. Correct licence: F3. The shared-device Office desktop apps in F3 cover this use case precisely. The 10GB mailbox accommodates moderate email volume. The Windows Enterprise rights secure the shared workstation.
Role: Healthcare scheduler, salon or spa receptionist, automotive service desk, government services counter. Usage: Manages appointments and bookings, communicates with clients/patients via Teams, accesses shared calendars, enters basic data into Office apps on a shared device. Correct licence: F3. Microsoft Bookings (included in F3 but not F1) is the deciding feature.
Role: Store manager, charge nurse, shift supervisor, warehouse team lead. Usage: Creates reports in Excel, authors documents in Word, presents in PowerPoint, manages Teams channels, accesses compliance tools, needs OneDrive for personal file storage across devices. Correct licence: E3 (not F1 or F3). The deciding factor is personal-device Office access: if the supervisor needs Office on their own laptop (not just a shared workstation), F3's shared-device restriction disqualifies it. The mistake organisations make is licensing all supervisors on E3 and then applying the same licence to everyone they supervise.
Role: Seasonal worker who left three months ago, contractor whose project ended, employee who transferred to a role using different tools. Usage: None. Correct licence: None. Ghost licences (active subscriptions assigned to users who no longer need them) are the purest form of waste. In frontline-heavy organisations with high turnover (retail averages 60 to 80% annual turnover), the ghost licence population can represent 10 to 20% of the total frontline licence count. See our licence usage audit guide for the methodology.
If the savings are this obvious, why do so many enterprises still have frontline workers on E3? The answer is structural, not negligent, and understanding the cause is essential for preventing recurrence.
The "one SKU" deployment: When Microsoft 365 is initially deployed, IT selects a single SKU (usually E3) and rolls it out to every employee. Segmenting the workforce into F1/F3/E3/E5 populations requires additional planning, identity management configuration, and ongoing governance. The path of least resistance is one SKU for everyone, and that one SKU is E3 because it covers the knowledge worker requirements.
Fear of under-licensing: IT is responsible if a user cannot access a tool they need. Nobody gets in trouble for giving a retail associate too much functionality. Everyone gets in trouble if the store manager cannot open a spreadsheet during a critical inventory count. The risk asymmetry favours over-licensing. The cost of over-licensing is invisible (it is buried in the EA bill), while the cost of under-licensing is immediately visible (an angry phone call from operations).
Microsoft's sales incentive: Microsoft's account team is not incentivised to recommend F1 over E3. The E3 licence generates 16x more revenue per user than F1. Microsoft will present F1 and F3 if asked, but the standard EA proposal defaults to E3/E5 for the full workforce. The frontline SKUs are rarely proactively recommended.
Lack of usage visibility: Most organisations cannot easily determine which users are actively using desktop Office apps, eDiscovery, advanced compliance features, or the other E3-exclusive capabilities. Without usage data, the right-sizing decision feels like guessing, and guessing favours the status quo. Our M365 Licence Optimisation Calculator and Microsoft Assessment Tools solve this data gap.
The longer frontline workers are on E3, the harder it becomes to move them. Over time, some users start using E3 features (a retail associate discovers desktop Excel, a warehouse worker starts saving files to OneDrive with their 1TB allocation), and moving them to F1 would now break workflows that were not intended but have become habitual. This is why the right-sizing exercise must happen early, before E3 features become embedded in frontline workflows that were never designed to depend on them. Every month of delay is a month of waste plus a month of workflow migration complexity.
A US retail chain with 28,000 employees: 22,000 store associates, 2,000 district/regional managers, 4,000 corporate staff. All 28,000 on Microsoft 365 E3. Annual Microsoft spend: $12.1M.
Analysis: 22,000 store associates use Teams on shared store tablets and check shift schedules: F1 ($2.25/user/mo). 2,000 district managers use desktop Office on company laptops for reporting: E3 ($36/user/mo). 4,000 corporate staff use the full E3 stack: E3 ($36/user/mo).
Optimised cost: 22,000 x F1 ($594K) + 6,000 x E3 ($2.59M) = $3.19M. Annual savings: $8.9M (74%). The savings exceed many stores' annual operating profit. See our Spanish retail group case study and US retail chain case study for similar dynamics.
A regional healthcare system with 14,000 employees: 8,000 clinical staff, 2,000 physicians, 4,000 administrative and corporate. All on E3. Annual spend: $6.05M.
Analysis: 6,000 bedside nurses use Teams on shared nursing station PCs, need basic email, check schedules via Shifts: F1 ($2.25). 2,000 clinical staff at shared workstations need desktop Office for clinical documentation, use Bookings for patient scheduling: F3 ($8.00). 2,000 physicians need full E3 (Outlook, Office, compliance, potential Copilot eligibility): E3 ($36). 4,000 administrative/corporate staff need full E3: E3 ($36).
Optimised cost: 6,000 x F1 ($162K) + 2,000 x F3 ($192K) + 6,000 x E3 ($2.59M) = $2.95M. Annual savings: $3.1M (51%). See our US healthcare provider case study.
A global logistics company with 35,000 employees: 25,000 drivers and warehouse workers, 3,000 dispatchers and shift supervisors, 7,000 office staff. Annual spend: $10.9M (30,000 x E3; 5,000 drivers on no licence).
Analysis: 25,000 drivers/warehouse workers need Teams on mobile phones for route updates and team chat: F1 ($2.25). 3,000 dispatchers use desktop apps on shared dispatch terminals: F3 ($8.00). 7,000 office staff: E3 ($36).
Optimised cost: 25,000 x F1 ($675K) + 3,000 x F3 ($288K) + 7,000 x E3 ($3.02M) = $3.99M. Annual savings: $6.9M (63%). The 5,000 previously unlicensed drivers can now be brought onto F1 for just $135K/year, improving communication and safety at marginal cost. See our US logistics firm optimisation case study.
A common objection to frontline SKU right-sizing is security: "We cannot put frontline workers on a lower-tier licence because we will lose security coverage." This is largely, though not entirely, incorrect.
Both F1 and F3 include Microsoft Entra ID P1 (the same identity management tier as E3), providing conditional access policies, multi-factor authentication, self-service password reset, and risk-based access controls. Both include Microsoft Intune P1 for mobile device management, the same MDM tier as E3, enabling device enrolment, compliance policies, app protection, and remote wipe. Both include Microsoft Defender for Office 365 (basic threat protection for email and Teams). The identity and device security posture of an F1 user is functionally identical to an E3 user for the vast majority of frontline scenarios.
F1 and F3 do not include: advanced eDiscovery (irrelevant for frontline workers, this is a legal/compliance tool for knowledge workers), full Data Loss Prevention (F3 includes basic DLP; F1 does not include DLP, so organisations with strict DLP requirements for frontline data handling should use F3), Advanced Threat Protection (Plan 2) (the higher tier of Defender for Office 365 is E5-only, not E3, so E3 does not provide it either), and Information Protection (advanced) (F3 includes basic sensitivity labelling; full Information Protection is E5/add-on).
For the majority of frontline use cases (shared devices in controlled environments, mobile phones with Intune management, basic email), the F1/F3 security stack is sufficient. The identity and device management foundation is identical to E3. See our M365 E5 security add-ons playbook for scenarios where additional security is genuinely needed.
The right-sizing exercise is a data and planning exercise, not a technology project. The Microsoft 365 admin centre supports SKU changes with zero downtime. A user can be moved from E3 to F1 within minutes without losing their account, Teams history, or SharePoint access. The risk is not technical; it is operational: ensuring that no worker loses a capability they depend on.
Pull Microsoft 365 usage reports for every user currently on E3/E5. Key data points: last login date (identify ghost licences), desktop Office app usage (Word, Excel, PowerPoint, Outlook desktop; if zero, the user does not need E3 or F3), mailbox size (if under 2GB, F1 is sufficient; if under 10GB, F3 is sufficient), OneDrive storage consumed (if under 2GB, F1 works; if over 2GB, F3 or E3 is required), and advanced feature usage (eDiscovery, DLP, Information Protection; if zero, F1/F3 is sufficient). Our M365 Licence Optimisation Calculator automates this analysis.
Categorise every user into a target SKU based on usage data and role analysis. Cross-reference with HR data (job role, department, location, device assignment) to validate. Flag exceptions: frontline workers with legitimate E3 usage, for manual review. Create the SKU migration plan: User X moves from E3 to F1, User Y moves from E3 to F3, User Z stays on E3.
Migrate 200 to 500 users across representative roles and locations. Monitor for: functionality gaps (users unable to access tools they need), mailbox issues (users hitting the 2GB F1 mailbox limit), OneDrive disruption (files exceeding the new storage allocation), and user complaints (captured through a dedicated support channel for the pilot group). Resolve issues before full deployment.
Execute the SKU changes in waves by department, location, or role. Communicate proactively: explain to frontline workers what is changing (in most cases, nothing visible changes for F1 users, as they lose access to desktop Office apps they were not using anyway) and provide a clear escalation path for workers who discover they need a capability their new licence does not include. The escalation path is critical. Any worker who genuinely needs E3 or F3 capabilities should be upgraded promptly, and the cost of a few hundred upgrades is negligible compared to the savings from thousands of correct downgrades.
Implement automated licence assignment based on role. When a new employee is onboarded in HR, their job role determines their default Microsoft licence (factory worker to F1, nursing station clinician to F3, corporate analyst to E3). When an employee changes roles, the licence adjusts automatically. When an employee leaves, the licence is revoked. This automation prevents the drift that recreates the over-licensing problem within 12 to 18 months. Use our true-up governance guide and ITAM compliance guide for the framework.
You do not need to get every assignment perfect on day one. Move the obvious candidates first: the 5,000 store associates who have never opened a desktop Office app, the 3,000 warehouse workers who only use Teams on their phones, the 1,000 ghost licences with no login in 90 days. These moves carry zero risk and deliver immediate savings. The borderline cases can be evaluated in Phase 2 or left on their current licence until the next quarterly review. Progress is better than perfection, and even a partial right-sizing exercise captures 60 to 80% of the total available savings. For the EA negotiation context, see our EA negotiation strategies and 2026 pricing playbook.
F1 users can join any Teams meeting (scheduled, ad hoc, or channel meetings) without restriction. They can also create ad hoc (instant) meetings. However, F1 users cannot schedule meetings through the Outlook calendar integration (because F1 does not include a full Outlook calendar). They can schedule meetings from within the Teams interface using the "Meet now" or "Schedule a meeting" function in a chat or channel. For frontline workers who need to attend team huddles, shift handovers, or management broadcasts, this is more than sufficient. If a frontline worker needs to schedule recurring calendar meetings with specific invitees (a supervisory function), F3 or E3 is more appropriate.
The user retains their account, Teams history, and SharePoint access. However, two storage limits become immediately relevant. Mailbox: if the user's Exchange Online mailbox exceeds 2GB (F1's limit), the mailbox enters a "send-only" state; the user can send email but cannot receive new messages until the mailbox is reduced below 2GB. Best practice: archive or clean up mailboxes before the downgrade. OneDrive: if the user's OneDrive storage exceeds 2GB (F1's limit), the user cannot upload new files. Existing files are not deleted, but a grace period applies (typically 90 days). Best practice: migrate files to a shared SharePoint library or team storage before the downgrade, or upgrade the user to F3 (2TB OneDrive) if file storage is a genuine need.
No. F3's Office desktop app entitlement is restricted to shared, company-managed devices, not personal devices. The distinction is based on the device being managed through Intune or domain-joined, and used by multiple people (not assigned to a single user as their primary device). If a frontline worker needs Office desktop apps on a personal laptop or a personally assigned device, F3 does not cover this use case. E3 or a Microsoft 365 Business plan is required. This restriction is the single most important distinction between F3 and E3 for frontline licensing decisions.
As of early 2026, Microsoft 365 Copilot is not available as an add-on for F1 or F3 licences. It requires a minimum of E3 or E5 (or the Business Standard/Premium equivalent). This means frontline workers on F plans cannot use Copilot for Word, Excel, PowerPoint, Outlook, or Teams. If your organisation is planning a broad Copilot rollout that includes frontline workers, this is a factor in the F1/F3 vs E3 decision, though the cost of E3 just for Copilot eligibility ($36/user/mo + $30/user/mo for Copilot = $66/user/mo) makes it a very expensive proposition for workers whose primary use case is shift scheduling and team chat. See our Copilot adoption playbook and Copilot ROI assessment.
For any organisation with 5,000+ frontline workers currently on E3 or E5, independent advisory delivers ROI that is difficult to overstate. The savings are large (typically $2 to $10M annually for major retailers, healthcare networks, and manufacturers), the implementation is relatively low-risk (SKU changes are non-destructive), and the ongoing governance requirements prevent regression. An independent advisor provides: usage data analysis, workforce segmentation frameworks, EA negotiation support, and implementation planning. Our EA Optimisation Service includes the complete right-sizing analysis, and our Contract Negotiation Service ensures the EA reflects the optimised SKU mix.
Our Microsoft advisory team analyses your frontline workforce licensing, identifies every user on the wrong SKU, models the savings from F1/F3 migration, and builds the implementation plan.
EA Optimisation ServiceIndependent Microsoft licensing advisory. Fixed-fee engagement models. 100% vendor-independent.