What Microsoft 365 for Business Actually Includes

Microsoft 365 is a subscription-based platform that bundles productivity applications, cloud storage, email hosting, and security tools into a single licence. For a business, the core components are the Office applications (Word, Excel, PowerPoint, Outlook), Exchange email, Teams, SharePoint, and OneDrive.

What varies between plans is the depth of security tooling, the level of device management, and which advanced compliance and identity features are included. The applications themselves are broadly consistent across plans; the differentiators sit in the administrative and security layers underneath them.

The existing guide on the benefits of Office 365 in the workplace covers the platform’s core productivity and collaboration value in detail. This guide focuses specifically on plan selection.

The Four Main Business Plans

Microsoft publishes four plans under the Microsoft 365 Business tier, each targeting a different combination of size, security need, and device management requirement. The plans are Business Basic, Business Standard, Apps for Business, and Business Premium.

• Microsoft 365 Business Basic includes web and mobile versions of the Office applications, Exchange email, Teams, SharePoint, and OneDrive with 1TB of cloud storage per user. It does not include the desktop-installed versions of Word, Excel, PowerPoint, or Outlook. This plan suits businesses whose staff work primarily in a browser or on mobile, and whose security requirements are straightforward.
  
  
• Microsoft 365 Business Standard adds fully installed desktop applications on up to five devices per user, along with webinar hosting via Teams, attendee registration tools, and video editing capabilities. It is widely used among businesses that need the full Office suite installed locally rather than browser-only access.
  
  
• Microsoft 365 Apps for Business provides the desktop-installed Office applications and OneDrive, but does not include Exchange email or Teams. It is suited to businesses that handle email through a separate provider and primarily need the Office applications and cloud storage.
  
  
• Microsoft 365 Business Premium is the most comprehensive plan. It includes everything in Business Standard plus advanced security features: Microsoft Defender for Business, Intune device management, Azure Active Directory Premium P1, and information protection and sensitivity labelling tools. This is the plan designed for businesses with genuine security requirements, regulated data, or a need to manage and enforce policies across devices.

How to Match a Plan to Your Business

The right plan depends on four factors: how staff access their applications, what security obligations the business carries, whether device management is required, and how the platform fits into the broader IT environment.

1. Application access is the first filter. If staff work primarily from fixed office desks on company-owned devices, the distinction between web-only and desktop-installed applications matters less than it once did. If staff work across multiple devices or in locations without reliable internet, locally installed applications remain important.
2. Security obligations are the more consequential filter for most businesses. A professional services firm handling client financial data, a medical practice holding health records, or a legal practice managing confidential correspondence each has a higher security bar than a business using 365 primarily for email and spreadsheets. Business Premium’s inclusion of Defender for Business and Intune device management is specifically designed for businesses in this position.
3. Device management through Intune allows an administrator to enforce security policies across every enrolled device, remotely wipe a lost or stolen device, and ensure that only compliant devices can access company data. For businesses with remote staff, a mix of company and personal devices, or any regulated data obligation, this is a material capability rather than an optional extra.
4. Platform fit covers whether the business uses Teams as its primary communication tool, whether SharePoint is used for document management, and whether the email platform is Exchange or a third-party provider. Businesses already committed to a non-Microsoft email platform may find Apps for Business a more economical fit than paying for Exchange they will not use.

Security Features by Plan

The security gap between Business Standard and Business Premium is significant and is where most businesses underestimate their requirements.

Business Basic and Business Standard include Microsoft’s standard anti-spam and anti-malware filtering and standard security defaults, which cover basic account protection. These are a reasonable baseline for a low-risk environment without regulated data.

Business Premium adds Microsoft Defender for Business, which provides endpoint detection and response across enrolled devices. It adds Intune for mobile device and application management, enabling policy enforcement across the device fleet.

It includes Azure Active Directory Premium P1, which enables sophisticated conditional access policies, such as blocking access from non-compliant devices or unfamiliar locations. It also includes information protection and sensitivity labelling tools for document classification and access control at the file level.

For businesses that have reviewed their security posture and identified gaps, the guide on integrating cybersecurity early in your IT planning covers how to approach security as a built-in requirement rather than a retrofit.

Licencing, Seat Counts, and Mixed Plans

Microsoft 365 business plans are licenced per user per month. Each user requires their own licence, and the plan applies per seat rather than per device. A single user can install the desktop applications on up to five devices under plans that include them.

One option that is underused by SMBs is mixed licencing: assigning different plan tiers to different users based on their role and access requirements.

A manager handling sensitive data might be assigned Business Premium, while a staff member using email and Teams for day-to-day coordination might be assigned Business Basic. Microsoft supports mixed plan assignments across a single tenant.

This approach can reduce overall licencing cost while ensuring that the users who need advanced security features have them. The trade-off is slightly more administrative complexity in managing a mixed environment, which is manageable with the right IT support in place.

Businesses that want to understand how licencing decisions fit into a broader managed IT arrangement will find the cloud IT solutions available in the Sutherland Shire a practical starting point, or the guide on how cloud solutions drive efficiency and security for Australian SMBs for the broader context.

Industry Considerations

Certain industries have specific requirements that affect plan selection directly.

Accounting firms handling client financial data benefit from Business Premium’s information protection and sensitivity labelling tools, which allow documents to be classified and access-controlled at the file level. The IT support guide for accounting firms covers the broader technology requirements for practices in this sector.

Legal practices handling confidential client correspondence and privileged documents have similar requirements. Sensitivity labelling and conditional access policies in Business Premium provide the controls needed to restrict who can access, forward, or print specific document types. The IT support page for law firms covers additional sector-specific considerations.

Healthcare businesses operating under the Australian Privacy Act and handling health records need to think carefully about data residency and access controls. Microsoft 365 data for Australian tenants is stored in Australian data centres by default for core services including Exchange Online, SharePoint, OneDrive, and Teams. The guide on keeping patient data safe covers the cybersecurity obligations that apply to healthcare organisations in more detail.

Migration and Deployment Considerations

Choosing a plan is one decision; deploying it correctly is another. A Microsoft 365 deployment that is set up with default configurations and no security hardening provides a fraction of the protection available in the platform.

The most common deployment gaps include MFA left disabled or not enforced, conditional access policies not configured in Business Premium environments, Defender for Business enrolled but not tuned, and SharePoint permissions set too broadly. These issues are not uncommon even in environments that have been running Microsoft 365 for some time.

A structured deployment or configuration audit covers these areas systematically. Businesses that have not reviewed their Microsoft 365 setup since initial deployment will often find settings that do not reflect current security expectations. The guide on what managed IT services in Sydney actually includes covers how ongoing management of a Microsoft 365 environment fits into a broader support arrangement.

For businesses considering migrating from an on-premises environment or a different platform, the guide on cloud migration and workforce productivity covers the planning and sequencing considerations in practical terms.

Choosing a Plan: a Decision Framework

The plan selection decision reduces to a small number of questions that most businesses can answer in a single conversation with their IT provider.

The questions to work through are:

1. Do your staff need desktop-installed Office applications, or is browser access sufficient? If desktop apps are needed, Business Basic is ruled out.
2. Does your business handle regulated, sensitive, or confidential data? If yes, Business Premium’s security layer is likely the appropriate choice.
3. Do you need to manage and enforce policies across staff devices? If yes, Intune in Business Premium provides this capability.
4. Do you use a third-party email provider with no plans to change? If yes, Apps for Business may be the most economical fit.
5. Are there staff with different access and security requirements? If yes, a mixed licencing approach may reduce cost while maintaining appropriate coverage.

Businesses that have worked through these questions and want to validate their plan selection against their broader IT environment will find the guide to choosing managed IT services for a growing Australian business a useful next step. 

Universal Technology Solutions works with SMBs across NSW and QLD to review, configure, and manage Microsoft 365 environments across all plan tiers. The contact page is the right starting point for a plan review or deployment assessment.