Most new employees need a Microsoft 365 license that covers their actual work: business email and collaboration, desktop Office apps if required, and the security and device controls their role needs. Start with the person’s tasks and devices, not a job title or the most expensive plan. For many small and midsize businesses, Business Basic, Standard, or Premium may fit; choose only after checking the included services, security needs, and your organization’s licensing terms.
Talk with IGTech365 about Microsoft 365 setup and managed IT support
What should you check before assigning a license?
Use this short intake for every new account. It prevents common mismatches, such as buying desktop apps for someone who works in a browser or overlooking device management for a user handling sensitive business data.
- What work will the person do? Identify the collaboration tools, files, email, and business systems they need. A role name alone does not tell you whether desktop Office apps, shared-device workflows, or specialized services are required.
- Where will they work? Note whether the person is office-based, remote, in the field, or working across locations. Confirm which company resources need secure access away from the office.
- Which devices will they use? Record whether a company-managed computer or mobile device is issued, whether a personal device is allowed, and whether the organization needs centralized configuration, compliance checks, or remote management.
- What data and risk apply to the role? Consider access to financial, customer, employee, health, or other sensitive information; the organization’s security policies; and any contractual or regulatory requirements. A product name alone does not establish that a business is compliant.
- What services are already licensed? Check existing subscriptions, available seats, add-ons, and service plans before buying. Microsoft says Business plans are designed for organizations with up to 300 provisioned seats across the Business family. If your company is near or above that limit, confirm the appropriate plan with Microsoft or your licensing provider.
Keep the answers with the onboarding ticket or access request. If the employee changes role, receives a new device, or gains access to more sensitive data, repeat the review instead of assuming the original selection remains suitable.
Which Microsoft 365 plan fits the employee’s work?
For organizations using Microsoft’s Business plans, compare the services the employee will actually use. Microsoft documents that the Business family includes Business Basic, Business Standard, and Business Premium, and that organizations can combine Business, Enterprise, and standalone plans in one account. Feature entitlements can vary by plan and change over time, so verify the current service description before assigning a license.
| Employee need | What to check | Possible starting point |
|---|---|---|
| Email, web-based Office apps, cloud files, and collaboration | Does the person need browser-based apps only, or installed desktop applications? Which services are included in the exact offer available to your tenant? | Business Basic may be a fit when web apps are sufficient. Microsoft’s plan comparison lists desktop client apps in Standard and Premium, but not Basic. |
| Installed Office apps on a computer | Does the employee need to install and use Word, Excel, PowerPoint, or Outlook desktop apps as part of their work? | Business Standard may be a fit when desktop apps are needed without the additional Business Premium security and device-management bundle. |
| Productivity apps plus bundled small-business security and device management | Do company policy and the employee’s devices require the protections and management capabilities included with Premium? Are those controls configured and operated? | Business Premium may be a fit. Microsoft describes it as including Standard’s capabilities plus products such as Defender for Business, Defender for Office 365 Plan 1, and Intune Plan 1. |
| Frontline, specialized, or larger-enterprise requirements | Does the user have a shift-based or shared-device workflow, or does the organization need an Enterprise service family, a standalone service, or an add-on? | Do not force a Business plan based on headcount alone. Compare the user’s requirements with Microsoft’s current plan and service descriptions, then confirm licensing terms. |
These are selection starting points, not a substitute for checking the exact SKU. Some Microsoft 365 and Office 365 offers have similar names but different included services. Teams availability, regional offers, add-ons, and licensing terms can also vary. Review Microsoft’s current Microsoft 365 and Office 365 plan options and the Business Premium FAQ before purchase or assignment. For a broader company-level comparison, see IGTech365’s guide to choosing a Microsoft 365 plan for a 25-250 employee business.
When do security, device management, and compliance change the choice?
Security requirements are part of the license decision, but a license does not secure a tenant by itself. The organization must configure the included services, assign the right users, maintain policies, and monitor alerts. Confirm the specific capabilities and licensing prerequisites for the plan and workload instead of treating Microsoft 365 security as one feature.
Company-managed and personal devices
If the employee’s devices must be enrolled, configured, or checked against company policies, determine whether your chosen subscription provides the required management rights and whether your administrator will deploy them. Microsoft documents Intune licensing and user assignment separately; check the current Intune license assignment guidance. Microsoft 365 Business Premium includes Intune Plan 1, according to Microsoft’s current business security plan details. A license alone does not enroll a device or establish a compliant configuration.
For a personal device, decide first whether it is allowed to access company data and which controls apply. If the business has no approved bring-your-own-device policy, do not assume that issuing a license resolves the policy or privacy questions.
Email and endpoint protection
Identify whether the employee needs protection for email and collaboration, their computer and mobile devices, or both. Microsoft’s service description says Defender for Business is included in Business Premium and is designed for small and medium-sized businesses. The Premium FAQ also identifies Defender for Office 365 Plan 1 among its included security products. Verify the service plan in the tenant and decide who will configure and respond to alerts. For details on product entitlements, see Microsoft’s Microsoft Defender service description For related services, visit IGTech365’s Microsoft 365 page.
Regulated or sensitive information
Map the user’s access to the company’s data-handling rules and any applicable legal, contractual, or industry obligations. Then verify that the exact license and configuration support the controls you intend to use. Do not claim that a specific plan alone makes a business HIPAA-compliant or satisfies another regulatory framework. Compliance depends on the organization’s processes, configuration, agreements, and use of the services. If the employee handles regulated healthcare information, review your requirements with a qualified compliance professional and the relevant Microsoft terms.
For organizations that want help assessing these choices, IGTech365 provides Microsoft 365 services and cybersecurity support.
How do you assign and verify the license on day one?
A repeatable onboarding sequence makes the decision useful. Microsoft 365 licenses are assigned to users, and Microsoft documents assignment through the admin center, including assigning a license when adding a user and using group-based licensing where appropriate.
- Approve the access request. Confirm the employee’s manager, start date, job responsibilities, data access, and device allocation.
- Select the least-sufficient plan. Match required apps, email and collaboration services, device management, and security to the current product terms. Do not buy an add-on to solve a need already included in the selected subscription, and do not assume an included feature has been configured.
- Create the account and assign the license. In the Microsoft 365 admin center, an authorized administrator can add a user and assign a license, or assign one from the user or license pages. For standardized roles, consider group-based assignment after validating which services that group grants.
- Review service plans and access. Check that the expected apps and services are enabled, required security policies apply, and the user has only the access approved for the role. Follow Microsoft’s license assignment instructions and Microsoft Intune license assignment guidance when relevant.
- Test the employee experience. Confirm sign-in, mailbox and collaboration access, desktop app activation if applicable, device enrollment, and any role-specific resources. Record exceptions so they are corrected before the employee depends on them.
- Revisit changes and departures. Use a role or device change as a trigger to re-check licensing. When someone leaves, follow the organization’s account, data-retention, access-revocation, and license-reclamation process. Do not remove a license until you understand the effect on their services and data.
Microsoft’s official admin-center guide to assigning or unassigning licenses explains direct and group-based assignment. If assignment fails, check the service status and license errors instead of repeatedly applying a different plan without diagnosing the cause.
Call IGTech365 at (866) 365-7798 to review Microsoft 365 onboarding and licensing
Microsoft 365 licensing for new employees: FAQs
Does every new employee need a Microsoft 365 license?
Not necessarily. A license is needed for the Microsoft services the person is authorized to use, but some roles may use another approved workflow or a different licensing arrangement. Check the actual services and access the role requires before assigning or purchasing a subscription.
Should all employees receive the same Microsoft 365 plan?
No single plan is automatically right for every user. Some organizations mix plans based on desktop-app needs, device management, security requirements, and job duties. Confirm the terms and service availability for the exact subscriptions in your tenant.
Is Business Premium required for every employee to get security?
No. Whether Premium is appropriate depends on the protections, management capabilities, and service rights the employee needs. Microsoft states that Business Premium includes specific security products, but the tenant still needs correct configuration and administration. Review the requirements for each user rather than assuming one plan is mandatory for everyone.
Does assigning a license automatically secure or manage the employee’s device?
No. A license may provide rights to use services, but administrators still need to configure policies, enroll devices where required, apply access controls, and monitor the environment. Intune device enrollment also requires the appropriate user license and setup.
Can an employee’s license change after they start?
Yes. A role change, new application requirement, device change, or updated security policy can justify reassessing the license. Check current entitlements and any effects on the user’s services before changing or removing a license.
Does a Microsoft 365 license make a business compliant?
No. A subscription can include tools that support security or compliance work, but compliance depends on the applicable requirements and how the organization configures, governs, and uses its systems. Validate the exact workload, service terms, and controls with qualified advisers.
For a practical review of license selection, onboarding, device management, or security configuration, contact IGTech365 about managed IT services or call (866) 365-7798.