Die drei Fragen, mit denen sich jede Microsoft-Lizenz entschlüsseln lässt
Vor jedem Preisvergleich stehen drei Punkte: Produktfamilie, Funktionsniveau und zugrunde liegende Dienstebene. Wenn diese Dimensionen getrennt werden, lässt sich der restliche Katalog deutlich leichter beurteilen.
Produktfamilie
Business-Suites richten sich an Organisationen mit bis zu 300 Nutzern. Enterprise-Suites unterstützen komplexere Governance und Skalierung. Frontline-Pläne sind für Arbeitsplätze ohne festen Schreibtisch und für Schichtarbeit gedacht.
Funktionsniveau
Basic und E1 priorisieren Webdienste. Standard, Premium und E3 enthalten Desktop-Apps. E5 erweitert den Stack um fortgeschrittene Funktionen für Sicherheit, Compliance und Kommunikation.
Dienstebene
Outlook ist eine Client-Anwendung; Exchange Online ist der Maildienst. Word ist eine Anwendung; OneDrive und SharePoint bilden die Speicher- und Zusammenarbeitsebene.
Warum der Listenpreis nur ein Teil der Kosten ist
Die Listenpreise von Microsoft zeigen den öffentlichen Basispreis für einen Plan, normalerweise pro Benutzer pro Monat und jährlich bezahlt. Die Lizenzkosten für Unternehmen werden jedoch durch die gesamte Tenant-Struktur bestimmt: wie viele Benutzer zugewiesen sind, welche Pläne sie nutzen, welche Add-ons angehängt sind und ob leichtere Benutzergruppen von den Kernmitarbeitern getrennt sind.
- Anzahl der bezahlten Benutzer und inaktiven Konten
- E3- und E5-Zuweisung über Abteilungen und Rollen hinweg
- Anforderungen für Frontline, Shared Mailbox und reine Exchange-Nutzung
- Copilot, Teams Phone, Sicherheits- und Compliance-Add-ons
Beispiel: Axeti-Preise als Benchmark
Microsoft listet Microsoft 365 E3 derzeit mit 36 $/Benutzer/Monat und E5 mit 57 $/Benutzer/Monat, während die jährlichen Axeti-Preise 338,40 € und 535,22 € pro Benutzer/Jahr betragen. Für Light-User listet Microsoft F3 mit 8 $/Benutzer/Monat und Exchange Online Plan 1 mit 4 $/Benutzer/Monat, während Axeti F3 mit 66,91 € und Exchange Plan 1 mit 33,94 € pro Benutzer/Jahr listet. Vergleichen Sie immer dieselbe Währung, Laufzeit und den gleichen Lizenzumfang.
Microsoft-Lizenzangebote richtig vergleichen
Ein Preisvergleich funktioniert nur, wenn jedes Angebot normalisiert ist. Dieselbe Lizenz kann unterschiedlich aussehen, je nachdem, ob sie Teams beinhaltet, welche Verpflichtung zugrunde liegt, welche Add-ons erforderlich sind und ob Support- oder Partnerleistungen im kommerziellen Modell enthalten sind.
- Dieselbe SKU, Laufzeit, Tenant-Modell und Währung vergleichen
- Kernbenutzer von Frontline- und Light-Benutzern trennen
- Add-ons vor der Berechnung der Gesamtkosten berücksichtigen
- Jährliche Kosten pro Benutzer und Gesamtkosten des Tenants verwenden
Wie Axeti hilft, Lizenzkosten zu senken
Axeti vergleicht die aktuelle Lizenzstruktur mit den Microsoft-Listenpreisen und CSP-Preisen und zeigt dann auf, wo die jährlichen Ausgaben reduziert werden können. Ziel ist es nicht, Lizenzen blind zu kürzen, sondern das passende kommerzielle Modell und die richtige Lizenzierungstiefe für jede Benutzergruppe zu finden, ohne den bestehenden Tenant zu ändern.
Business, Enterprise and Frontline: the intended audience
Business, Enterprise and Frontline are not simply small, medium and large price tiers. Business suites are designed for organisations with up to 300 users and offer a compact route from browser-first work to protected managed endpoints. Enterprise suites support larger and more complex environments, with broader combinations of productivity, Windows, identity, security and compliance. Frontline plans address a different operating model: shift workers, shared devices, short sessions and users who do not need the same mailbox, application and device entitlement as a full-time desk-based knowledge worker. Choose the work profile first; the number of employees is only one input.
What E1, E3 and E5 actually describe
E1, E3 and E5 indicate capability levels within an Enterprise family, but the family name is indispensable. Office 365 E1 is primarily browser-first enterprise productivity and collaboration. Office 365 E3 extends that work layer with installed Office applications. Microsoft 365 E3 is wider: it brings the management, identity, Windows and security foundation that many corporate-device environments need. E5 should be treated as a decision about specific advanced security, compliance, analytics or communications outcomes — not as a default upgrade for everybody. The right comparison is always full SKU against full SKU, with the market and Teams variant recorded.
Desktop applications, web applications and services are different entitlements
A cloud subscription can include three very different things. First, the service: Exchange Online hosts mail, OneDrive stores an individual’s files and SharePoint supports team content. Second, the client: Outlook, Word, Excel and PowerPoint are applications used to reach that service or create work. Third, the management and protection layer: Intune, Entra, Defender and Purview define which device, identity and data rules apply. A licence comparison that only says “includes Office” leaves these distinctions unresolved. The practical test is: does the person need desktop apps, a mailbox, a managed endpoint, a controlled sign-in, or a combination of all four?
Word, Excel, PowerPoint and Outlook are the applications a person opens and uses.
Exchange Online, OneDrive, SharePoint and Teams are the online services behind the work.
Entra, Intune, Defender and Purview set the access, device, security and data conditions.
Add-ons are part of a deliberate licensing design
Add-ons are not evidence that the initial licence choice was wrong. They are how a mature licence mix avoids paying for a complete top-tier suite when a smaller set of users needs one specific capability. Examples include Teams Phone for calling roles, higher Entra or Intune capability for privileged access and endpoint control, Defender and Purview services for security or compliance requirements, Power BI and Power Platform for analysts and makers, and Project, Visio or Dynamics for specialist work. Document the business reason, target audience, owner, prerequisite plan and renewal status for every add-on. That turns a confusing tenant into an auditable design.
Microsoft 365 licence families at a glance
These plans are not a single ladder. They solve different combinations of productivity, devices, security and compliance. Use this matrix to compare the families first; then use the detailed tables below to choose the capability level.
Comparison table: Business Basic vs Standard vs Premium
This comparison focuses on the decision points that most often change the appropriate Business plan. It is not a complete feature matrix; final entitlement should always be confirmed against the exact SKU and market.
Vergleichstabelle: Office 365 E1 vs. Microsoft 365 E3 vs. E5
Der entscheidende Unterschied ist nicht nur die Zahl. Office 365 und Microsoft 365 sind unterschiedliche Produktfamilien; ein Vergleich von „E3“ muss deshalb mit der Ebene rund um die Produktivitätssuite beginnen: Identität, Geräteverwaltung, Windows und Sicherheit.
The product map: what the names actually refer to
Productivity and collaboration
The names Word, Excel, PowerPoint, Outlook, Exchange Online, OneDrive, SharePoint and Teams refer to different parts of the everyday work layer. Microsoft 365 Apps describes the installed desktop suite; Exchange Online is the mailbox service; OneDrive is personal work storage; SharePoint is the shared content and intranet layer. Teams may be bundled or separately licensed depending on the SKU and market. The key is to test the workflow: email and calendar, document authoring, file sharing, team collaboration and meetings are related but not interchangeable entitlements.
Identity, devices and security
Identity and device control sit beside productivity, not inside it. Microsoft Entra determines how a person authenticates and which access conditions apply. Intune configures and manages corporate devices and applications. Windows Enterprise provides enterprise operating-system capabilities. Defender protects different surfaces — endpoints, identity, email and cloud applications — while Purview is concerned with data, retention, audit, discovery and compliance. A plan may include a useful baseline but not every advanced feature. Define the control outcome before comparing names, then confirm the relevant service plan in the actual SKU.
Automation, analytics, business applications and AI
Power Platform, Dynamics 365, Power BI, Project, Visio, Teams Phone and Copilot are specialist workload families. They do not move in lockstep with the Office suite. A user who needs dashboards does not necessarily need a phone system; a project manager does not necessarily need a premium automation entitlement. Copilot deserves the same discipline: it is an AI capability with data-access and governance implications, not a substitute for content architecture, permission hygiene or adoption planning. License these services around a named job to be done and measure whether that job is actually being performed.
The part of the catalogue that most comparisons miss
E1, E3 and E5 are only one naming pattern inside a much larger platform. A useful decision has to separate a person’s day-to-day work from the services that protect, govern and extend it. That is why a seemingly simple request — “we need Office” — can lead to a different answer for a finance analyst, a call-centre employee, a frontline colleague, an IT administrator and a contractor. The goal is not to give every person the richest suite. It is to make the baseline deliberate, then add capability only where the role, risk or workflow makes it valuable.
Desktop Office is only one part of the answer
Microsoft 365 Apps for business and Apps for enterprise are easy to overlook because their names sound like a smaller version of Microsoft 365. They are not a replacement for a collaboration suite. They primarily license the installed Office applications and OneDrive. Exchange Online, SharePoint, Teams, Intune and advanced security are separate questions. This matters in migrations: a user can have Outlook installed but no Exchange Online mailbox, or have an Exchange mailbox and use Outlook only on the web. Treat the client application and the cloud service as two different layers, then check what the chosen SKU actually grants.
Security, identity and compliance have their own product logic
Intune manages devices and apps. Microsoft Entra governs identity, sign-in and conditional access. Defender is a family of protections across endpoints, email, identity and cloud applications. Purview covers information protection, retention, audit, eDiscovery and other compliance workloads. They are often discussed as if each were a single switch; in practice, availability depends on the specific plan and capability level. A sensible review starts with the control objective — for example, prevent unmanaged devices from opening sensitive files, protect executives from phishing, or retain financial records — and only then maps that objective to the relevant service plan or add-on.
Specialist products should be licensed around a job, not spread across the tenant
Power BI, Power Apps, Power Automate, Dynamics 365, Project, Visio, Teams Phone and Microsoft 365 Copilot solve distinct business problems. They should not be treated as a generic upgrade to every employee. A planning team may need Project; a sales team may need Dynamics; selected analysts may need premium Power BI capability; regulated roles may need specific Purview features; users handling high volumes of customer calls may need Teams Phone. Copilot adds another reason to be exact: it is a paid AI layer with prerequisites and data-governance implications, not a magic productivity checkbox. Scope each of these services to a documented use case, owner and adoption plan.
The access check that prevents expensive mistakes
Before approving a licence, define what the user must access, from which device, under which conditions and with what level of protection. A shared kiosk, a personal managed laptop, an unmanaged contractor device and a privileged administrator workstation are four different access scenarios. That one decision often determines whether the right answer is a browser-first plan, a full Microsoft 365 suite, a Frontline licence, or a targeted Intune, Entra, Defender or Purview add-on.
How to build a licence mix that remains understandable
Start by grouping people into a small number of work profiles: browser-first collaboration, desktop knowledge work, managed corporate devices, frontline or shared-device work, privileged IT roles, and specialist users. Give each profile a baseline suite. Then list the exceptions as explicit add-ons with a business reason. Keep a record of the exact product name, Teams variant, commercial term, market and renewal date; a short SKU inventory is far more useful than a spreadsheet full of informal labels such as “E3 with security”. Review the mix before renewal and after changes in headcount, device policy, security requirements or application adoption. The best licensing design is not the one with the most features. It is the one every stakeholder can explain, operate and audit.
A five-step review before renewal or migration
Use the same review whether you are buying a new tenant, correcting an inherited estate or preparing an annual renewal. It prevents the two common failures: equating “Office” with a complete work environment, and buying a broad suite when a documented targeted capability would do.
Map the real work
Describe what each user group does: browser-first work, installed Office, shared-device work, phone calls, reporting, automation or privileged administration. Role and workflow are more reliable than department names.
Separate app, service and control
Check desktop applications, Exchange mailbox, OneDrive and SharePoint separately from identity, device management, endpoint protection and data controls. This is where most abbreviated comparisons fail.
Choose the baseline suite
Assign the smallest baseline that supports the person’s normal work: Business Basic, Standard or Premium; Office 365 E1/E3; Microsoft 365 E3; or a Frontline plan. Treat E5 as a justified exception, not a universal default.
Add only named capability gaps
Use add-ons for a clearly named need: Teams Phone, higher identity or endpoint control, advanced Defender or Purview, Power BI, Power Platform, Project, Visio, Dynamics or Copilot. Record the owner and expected outcome.
Validate the commercial SKU
Before ordering, verify the exact full SKU, Teams inclusion, country/market, purchase programme, commitment term and renewal date. A technically correct design can still become the wrong purchase if this final check is skipped.
