Microsoft 365 F1 vs F3 vs E3

Who is eligible for a Frontline Worker licence?

Microsoft’s Product Terms say a Frontline Worker licence may be assigned only to a user who meets at least one of these conditions: the user’s primary work device has a single screen smaller than 10.9 inches; or

• the user shares their primary work device with other users licensed with Frontline Worker licences during or across shifts.
• For the shared-device condition, the other qualifying users must also use it as their primary work device. Any software or service accessed on that device still needs the appropriate user or device licence.
• Job title alone is not the test. A warehouse manager with a dedicated laptop may be an operational employee but fail the device-based frontline condition. Conversely, a shift worker sharing a licensed kiosk may qualify.
• Document the primary-device pattern. Do not classify users as frontline solely because they are outside headquarters or because F3 is cheaper.

Microsoft 365 F1: communication and read-oriented work

F1 is the entry-level Microsoft 365 frontline suite. Microsoft’s current comparison describes limited productivity rights: no desktop Office applications and a more restricted web/mobile experience than F3. Microsoft’s transition guidance distinguishes F1 read-only experiences from the fuller web and mobile application rights in F3. F1 can fit workers who primarily consume company information, communicate in Teams, access approved resources, complete limited tasks, and use managed frontline devices. It should not be selected for users expected to edit documents as ordinary information workers. Some backend services may appear provisioned because other included experiences depend on them. Technical access or the presence of a mailbox object does not expand the user’s licence rights. Validate permitted Exchange, SharePoint, OneDrive, Teams, and Office use against the current service description.

Microsoft 365 F3: broader frontline productivity

F3 adds fuller web and mobile productivity rights, still without the standard desktop Office applications. It is often better for workers

• who create or edit documents through supported web/mobile apps, use line-of-business applications, and need a broader frontline security and management baseline.
• Microsoft’s guidance restricts integrated mobile use to devices with a screen smaller than 10.9 inches. A shared Windows
• PC or larger dedicated device needs its own rights and must still fit the frontline eligibility rule.
• F3 should be validated for mailbox, storage, Windows, virtualisation, Intune, Teams, and application requirements. “Includes web apps” does not make it equivalent to E3.

Microsoft 365 E3: information-worker baseline

E3 is appropriate when the user is a full information worker, has a dedicated larger work device, needs desktop Microsoft 365 Apps, or requires Enterprise service rights and capacities that frontline plans do not provide. A user can work in a factory, hospital, shop, or field location and still need E3. Licensing follows eligibility and use rights, not the physical workplace. The cost difference should be weighed against operational workarounds. If F3 users repeatedly need remote desktop access, unsupported desktop-app use, larger mailbox capacity, or exceptions to the shared-device model, E3 may be the more defensible design.

Typical personas

Shared kiosk worker The worker signs in for a shift on a shared primary device and consumes schedules, procedures, Teams messages, and simple applications. F1 may fit if the workload stays within its rights; F3 may be needed for broader editing and applications.

• Mobile field worker The worker’s primary work device is a qualifying phone or small-screen device. Compare F1 and F3 based on creation/editing, application, security, and storage needs.
• Supervisor with a dedicated laptop
• If the laptop is the primary work device and does not meet the screen condition, the user may not qualify for a Frontline Worker licence. E3 or another eligible information-worker plan is likely the correct starting point. Occasional user of a shared PC
• Occasional use does not automatically make a person frontline. Confirm that the shared device is genuinely the user’s primary work device and that the other users satisfy the rule.

Shared devices require their own design

Use shared-device mode, sign-in controls, session cleanup, data protection, application deployment, and conditional access appropriate to the environment. Separate the user subscription from any Windows, application, virtual desktop, or device-specific licence. Intune offers frontline management patterns, but an Intune capability does not override the Product Terms for Microsoft 365 or third-party software. Inventory everything accessed from the device.

Moving from E3 to F3 or F1

Before changing a licence, check desktop app activation, mailbox and archive, OneDrive/storage, Teams capabilities, Windows

• and virtualisation rights, Intune configuration, security service plans, Power Platform usage, and line-of-business applications.
• Pilot the change with representative users. Preserve data and service continuity,
• but do not leave service plans enabled when the new
• licence does not grant the right to use them. Microsoft’s

Practical checks

switch guidance lists workload differences that should be reviewed explicitly.

Common mistakes

Assigning F licences by department or salary level. Ignoring the 10.9-inch and shared-primary-device conditions.

• Treating F1 as a normal web-app editing licence.
• Assuming F3 includes desktop Office applications.
• Using shared credentials instead of named-user identity.
• Forgetting licences for software accessed on the shared device.

Practical checks

Downgrading E3 without checking mailbox, storage, security, and app rights.

Decision checklist

Does the user meet one of Microsoft’s frontline eligibility conditions? What is the user’s primary work device and screen size?

• Is the device shared as a primary device across qualifying shifts?
• Does the user only read content, or create and edit it?
• Are desktop applications, larger service capacities, or Enterprise rights required? Which user, device, and application licences apply to the shared endpoint?
• Can HR and IT detect when a frontline user changes role or device?

Practical checks

For a persona-based licence allocation review, contact Axeti . The framework can also be incorporated into Axeti’s Microsoft 365 licence mix guide .

Sources and scope: This article is based on Microsoft’s Frontline Worker eligibility terms , Enterprise-to-Frontline transition guidance , and Intune frontline guidance . Eligibility and service rights must be checked against the customer’s current agreement and Product Terms; those terms prevail.