Free tool
Which Microsoft 365 licenses do you actually need?
Five questions about how your business really works, and you get a recommended SKU mix for the whole organization rather than one license for everybody. Every recommendation comes with the reasoning printed underneath it: which answer drove which line, what it costs against the next best path, and what we deliberately left out.
Prices verified August 3, 2026. Reviewed quarterly, next review November 3, 2026. Nothing you type leaves your browser, and there is no email gate on the result.
Question 1 of 5
Question 1
How does your workforce split?
Almost nobody needs the same license for everybody, and this is the single largest saving available on a mixed workforce. Count each person once.
If you are not sure where somebody goes, ask whether they would notice losing installed Outlook. That is usually the line.
Question 2
How deep does your security need to go?
This is the question that decides E3 versus E5 more than any other. Answer for what you will actually operate, not what you would like to own.
Buying detection nobody watches is the most expensive shelfware in the Microsoft catalog.
Question 3
What are you on the hook for?
Compliance is where Purview licensing gets decided, and where the most money gets wasted on capability nobody has been asked to produce.
Answer for what a regulator, an auditor, or a customer contract can actually demand of you in writing.
Question 4
What is still running on-premises?
This one only ever removes a line item. If you are cloud-only, Defender for Identity has no domain controllers to watch, so it comes out of the mix, and we will say so.
Hybrid means your on-premises Active Directory is synced up to Entra ID with Entra Connect.
Question 5
Any of these for anyone?
Teams Phone and Power BI Pro are bundled into E5 and sold separately everywhere else, so real counts here move the E5 break-even. Copilot never changes which plan wins, only the total. Leave anything at 0 and move on.
For Power BI, count everyone who needs to publish a report and everyone who needs to open one; viewing needs a license too unless you are on Fabric capacity. Teams Phone calling minutes are billed on top wherever you buy it. For Copilot, count the realistic 12-month number, not the eventual one.
How the tree decides
The whole rule set, printed, so you can check the answer instead of trusting it. There is nothing else in the engine.
Everyone gets the cheapest license that meets the requirement they told us about
Three candidate base plans are priced for your desk users: Business Premium, E3, and E5. Each one is charged only for what it does not already include, and where a suite costs less than the individual parts it replaces the suite is bought instead. The lowest total wins. If two paths meet the same requirement, the more expensive one is named and rejected on the results page rather than quietly dropped.
The 300-seat wall is enforced as a wall
Business Basic, Business Standard, Business Premium, and Apps for business share one cap of 300 provisioned licenses per tenant, combined. Not 300 each. The engine tracks how many Business seats your mix has used and moves the overflow to Office 365 E1, F3, or E3 automatically, which is a supported configuration rather than a workaround.
Conditional access is treated as all-or-nothing
If your answers imply that every account has to sit behind conditional access, and for cyber insurance or any named framework they do, then the cheap seats need it too. Business Basic and Office 365 E1 do not include Entra ID P1. Microsoft 365 F1 and F3 do. That single fact is why the recommendation sometimes puts your least expensive users on a frontline SKU rather than the one that looks cheaper on the price list.
Anything you have no use for is removed and named
Defender for Identity watches on-premises domain controllers, so a cloud-only tenant gets it taken out. Intune Plan 2 stopped being an add-on for E3 in July 2026, so E3 never gets charged for it. The Purview Suite is not recommended to anyone with no compliance obligation to point at. Every removal appears on the results page under what we did not recommend, with the reason.
The four places Microsoft licensing money actually leaks
In roughly the order we find them when we audit a tenant against its invoice.
Leak one
One license type for everybody
The most common and the most expensive. Every shared-device shift worker on a full knowledge-worker seat is roughly $19.00 a month of nothing. Across forty of them that is $9,120 a year.
Leak two
Buying the parts when the suite is cheaper
The five Defender components bought individually come to $30.70 per user per month. The suite that contains all five is $12.00, or $10.00 on Business Premium. This one accumulates quietly, one add-on at a time.
Leak three
Paying for what the base plan already includes
Since July 2026, E3 includes Intune Plan 2, Intune Remote Help, Intune Advanced Analytics, and Defender for Office 365 Plan 1. Plenty of tenants are still paying for those separately because the renewal was quoted against the old packaging and nobody re-read it.
Leak four
Buying E5 for two features
E5 is $60.00. If the reason you want it is the security stack, E3 plus the Defender Suite is $51.00 and Business Premium plus both of its suites is $37.00. E5 earns its price when you genuinely need Power BI Pro and Teams Phone at scale on top of everything else, and not really before.
What would change this answer
Five questions cannot cover everything. These are the situations where the recommendation above stops applying, and they are worth reading before you take a number to a renewal conversation.
Government and sovereign clouds
GCC, GCC High, and DoD run a different price sheet and a different catalog. The Business family does not exist in GCC High at all, so anything holding CUI under DFARS 252.204-7012 or ITAR lands on G3 or G5 instead. Nothing on this page applies to those tenants.
Nonprofit and education pricing
Registered nonprofits get Business Premium free for the first 300 seats and heavy discounts above that, which changes the shape of the answer completely, not just the total. Education has its own A1, A3, and A5 line.
How you buy it
These are Microsoft list prices on an annual commitment billed annually. Paying monthly on an annual term runs about 5 percent higher, month-to-month runs about 20 percent higher, and buying through a partner or on an Enterprise Agreement can move the number in either direction. An EA needs 500 seats.
Your renewal date
The July 1 2026 increase applies to existing customers at their first renewal after that date, not immediately. If you are mid-term you are still on the old price, which is worth knowing before you agree to anything.
Frontline eligibility
Microsoft 365 F1 and F3 carry frontline worker use rights. They are meant for shift and shared-device staff, not for a desk worker you would like to license cheaply, and Microsoft does audit this.
Microsoft 365 licensing questions
Which Microsoft 365 license do I need?
There is no single answer for a whole organization, which is why this tool asks about your workforce split first. The honest general rule is: under 300 seats, Business Premium plus the Business Premium editions of the Defender and Purview suites covers almost everything E5 does for $37 per user per month against $60. Over 300 seats, Microsoft 365 E3 is the base and you add the Defender Suite, the Purview Suite, or both depending on what you are actually obliged to do. In both cases, anyone who does not need installed desktop Office should not be on a full knowledge-worker license at all.
Can I mix Microsoft 365 license types in one tenant?
Yes, and you almost certainly should. Microsoft explicitly supports combining Enterprise, Business, and standalone plans in a single tenant. The only hard constraint is that Business Basic, Business Standard, Business Premium, and Apps for business are capped at 300 provisioned licenses across the whole family combined, not 300 each. Above that you keep the 300 Business seats and license everyone else on E3, E5, F1, or F3 in the same tenant.
Do the Defender Suite and Purview Suite work with Business Premium?
Not the enterprise versions. Since May 2025 Business Premium is no longer an eligible base plan for the $12 Microsoft Defender Suite or the $12 Microsoft Purview Suite, which now require Microsoft 365 E3, or Office 365 E3 with EMS E3. Business Premium instead has its own editions: Defender Suite for Business Premium at $10, Purview Suite for Business Premium at $10, or both together for $15, all capped at 300 seats. That makes Business Premium plus both suites $37 per user per month, not the $46 most comparisons still quote.
Is Microsoft 365 F3 better value than Business Basic?
It depends entirely on whether you need conditional access. Business Basic is $7 and gives a 50 GB mailbox and 1 TB of OneDrive, but it does not include Entra ID P1, so those accounts cannot be covered by a conditional access policy. Microsoft 365 F3 is $10 and does include Entra ID P1 and Intune Plan 1, with a 2 GB mailbox. So if you have to be able to tell an insurer that conditional access applies to every account, F3 at $10 beats Business Basic at $7 plus Entra ID P1 at $7. If you do not, Business Basic is cheaper and gives a far bigger mailbox.
When does Microsoft 365 E5 actually make sense?
When you need three or more of the things only E5 bundles: Security Copilot, Intune Endpoint Privilege Management, Cloud PKI, Power BI Pro for a lot of people, and Teams Phone for a lot of people. Power BI and Teams Phone are the two most commonly missed. E5 is $60. E3 plus the Defender Suite is $51 and E3 plus both suites is $63, so the security and compliance stack alone does not justify E5 unless you need both suites. Add fifty Power BI Pro seats or fifty Teams Phone seats and the math flips.
Do you need to know our answers to give us a price?
No. This runs entirely in your browser, nothing is sent anywhere, and there is no email gate. If you want the version with your actual license counts and renewal date in it, send those over and we will come back with a written comparison.
Does Desert Lakes resell Microsoft licensing?
Yes. We are a Microsoft partner and licensing is included in our managed IT bundles rather than billed as a separate line. That is also why this tool is built to recommend the cheapest correct answer rather than the largest one: if the honest answer is that you are already over-licensed, we would rather you heard it here.
Where these numbers come from
Every price is Microsoft published list pricing, verified August 3, 2026 against the sources below, and shared with our Microsoft 365 licensing cost calculator so the two tools cannot drift apart. We re-check the whole file quarterly and the next review is November 3, 2026. If Microsoft moves a price between reviews, that date is how you will know this page has not caught up yet.
- Microsoft 365 pricing and packaging updates, effective July 1 2026
- Microsoft 365 business plans and pricing
- Microsoft 365 business add-on services and pricing
- Microsoft security suites pricing (Defender Suite, Purview Suite, Entra Suite)
- Microsoft Defender Suite for Microsoft 365 Business Premium
- Microsoft Purview Suite for Microsoft 365 Business Premium
- Microsoft 365 and Office 365 plan options (the 300-seat Business family limit)
- Microsoft Intune plans and pricing
This tool answers which licenses to buy. If you already know that and just want the arithmetic on Business Premium against E3 against E5, the licensing cost calculator does that in one screen. If licensing is one line in a bigger decision, the in-house vs outsourced IT calculator puts salaries, tooling, and licensing in one number, and our own pricing includes Microsoft licensing rather than billing it on top.
Have us run this against your actual tenant
Send us your current license counts and your renewal date. We will come back with what you are paying for and not using, what you are missing, and the written side-by-side. No obligation, and if the answer is that you are already licensed correctly we will tell you that too.
Call (855) 737-9500 / (480) 573-3349
Email [email protected]
15-minute response on critical issues, 24/7. Onboarding in two to three weeks.