Microsoft 365 F SKU Licensing Guide: F1, F3 and Frontline Worker Licensing Explained

What Are the F SKUs and Why Do They Exist?

Microsoft introduced the F SKU tier — originally called Firstline Worker plans — to serve the roughly two billion global workers who do not sit at a desk with a dedicated PC and company email account. Retail associates, manufacturing operators, healthcare aides, logistics and warehousing staff, hospitality workers, field service engineers, and security personnel all represent populations whose collaboration and productivity needs are fundamentally different from knowledge workers in office environments.

The F plans are priced dramatically below the E plans precisely because they serve this population: $3 per user per month for F1 and $10 per user per month for F3 after the July 2026 pricing updates. The economic rationale is straightforward — organisations with 10,000 frontline workers cannot spend $39 per user per month (E3 pricing) for a workforce population that needs Teams communication, scheduling tools, and perhaps task management but not the full Office productivity suite or advanced security stack.

The F plans exist within the full M365 licensing structure and can be deployed alongside E1, E3, E5, and E7 in the same Microsoft 365 tenant. Importantly, the M365 stack is E1, E3, E5, and E7 for knowledge workers — with F1 and F3 as the dedicated frontline tier, not a subset of the E plans. Understanding this distinction matters for compliance: F licences have usage restrictions that E licences do not, and assigning F licences to users who do not meet those restrictions creates audit exposure.

Microsoft 365 F1: The Entry-Level Frontline Plan

Microsoft 365 F1 is priced at $3 per user per month and represents the minimum capability set for a connected frontline worker. It is a web and mobile-only plan — there are no desktop Office application entitlements — designed for workers who access corporate services on shared devices, kiosks, or personal mobile devices.

What F1 Includes

F1 provides Microsoft Teams (web and mobile only, full communication and collaboration features including Shifts, Tasks, and Walkie Talkie), SharePoint Online for document libraries and intranet access (view and limited edit on mobile and web), OneDrive for Business with 2 GB storage, Yammer (enterprise social), Stream for video content, Planner for task management, Exchange Online Kiosk with a 2 GB mailbox but no Outlook desktop access and no calendar features, and the web versions of Word, Excel, and PowerPoint only — no installation rights for desktop applications. F1 includes basic Intune mobile device management for device enrolment and policy enforcement. Windows 11 Enterprise rights are not included.

The critical F1 constraints are: no desktop Office applications, no Outlook calendar (only email via webmail), 2 GB OneDrive storage (versus 1 TB for E plans), and no Exchange Online Full (the F1 mailbox is Exchange Online Kiosk, which restricts inbox management and calendar functionality). These constraints are intentional — they define the F1 user profile as someone who primarily communicates via Teams and accesses documents on shared or mobile devices, not someone who drafts documents, manages a complex calendar, or requires local application installation.

F1 Use Cases

F1 is the right licence for retail store associates who need Teams for shift communication and task lists but manage their schedule via the Shifts app rather than Outlook calendar; manufacturing floor workers who need access to safety documentation, shift schedules, and team channels but do not use email as a primary work tool; security and facilities personnel who communicate via Teams walkie-talkie and check task assignments on shared tablets; hospitality staff who need access to team channels for shift briefings and internal announcements; and warehouse and logistics workers who access picking lists, procedure documents, and team channels via mobile devices.

The $3 per user per month price point makes F1 the lowest-cost M365 licence for a connected worker, but its restrictions require honest assessment of whether the population genuinely fits the F1 profile. Misassigning F1 to workers who regularly use Outlook for calendar management, require desktop Office applications, or need more than 2 GB of file storage creates service gaps that generate shadow IT, workarounds, and eventual compliance risk when audited.

Microsoft 365 F3: The Full-Featured Frontline Plan

Microsoft 365 F3 is priced at $10 per user per month and provides a materially richer capability set than F1, adding desktop Office applications, a full Exchange Online mailbox, device management features, and basic Power Platform capabilities.

What F3 Includes

F3 includes everything in F1 plus Microsoft 365 Apps for mobile and desktop — the full Office application suite (Word, Excel, PowerPoint, Outlook, OneNote, Access, Publisher) with installation rights for up to 5 PCs or Macs, 5 tablets, and 5 smartphones. Exchange Online Plan 1 with a 50 GB mailbox and full Outlook desktop access. OneDrive for Business with 1 TB storage. Microsoft Intune for full device management including mobile device management, mobile application management, and full compliance policy enforcement. Power Apps (limited connector access) for building simple frontline worker apps. Power Automate for workflow automation. Windows 11 Enterprise edition rights. Teams Phone capabilities (native phone system integration, as updated in 2026). Yammer, Stream, Planner, and all the F1 collaboration capabilities.

F3 removes the key limitations of F1: it provides desktop Office applications, a full-featured Exchange mailbox with Outlook access, 1 TB OneDrive storage, full Intune device management, and Windows Enterprise rights. For frontline workers who need the full productivity suite — field service engineers who document work orders in Word, healthcare administrators who manage complex Outlook calendars, or supervisory roles that require desktop computing capabilities — F3 delivers this at $10 per user per month, $29 per user per month less than the equivalent E3 licence.

F3 Use Cases

F3 is right for field service engineers who document work orders, access technical manuals, and manage calendars from the field; healthcare floor supervisors who manage complex Outlook calendars, create shift reports in Word, and require full Intune device management for NHS or regulated environment compliance; retail store managers who use Excel for inventory reporting, Outlook for team calendar management, and require Windows Enterprise rights on their devices; manufacturing quality assurance teams who document processes in Word and access compliance systems via regulated devices managed by Intune; and logistics supervisors who coordinate routes, manage driver communications, and use Power Automate to automate repetitive reporting workflows.

The $7 per user per month difference between F1 and F3 is significant at scale. For an organisation with 10,000 frontline workers, the F3-versus-F1 delta is $840,000 per year. The decision should be driven by whether those 10,000 workers actually need desktop Office applications, full Exchange mailboxes, and Intune device management — or whether the F1 capability set is genuinely sufficient for their roles.

F SKU Compliance Rules: Who Can Hold an F Licence?

This is the area where F SKU licensing generates the most compliance risk for enterprise organisations, and where Microsoft audit activity has been increasing. F licences carry usage restrictions that differ fundamentally from E licences, and these restrictions are not always clearly communicated during the licence procurement process.

The Device Restriction

F1 and F3 are designed for workers who do not have a dedicated PC as their primary work device. Microsoft's licensing terms define the permitted use scenarios as shared-device environments (kiosk PCs, shared workstations, tablets used by multiple workers) or personal mobile device access. Users who have a dedicated PC assigned to them as their primary work computer are not compliant with F1 licensing terms — they should be on E1, E3, or higher. This is the single most common source of F SKU compliance exposure: organisations that assign F1 to save cost on populations who actually have dedicated desktops and use those devices for primary work.

The Application Restriction (F1 Only)

F1 users are not licensed for desktop Office application installation. If a user assigned an F1 licence installs Word, Excel, or Outlook on a personal or work PC and uses them for work purposes, the organisation is out of compliance. F1's web-only application entitlement is a genuine usage restriction, not a technical lockout — users can technically install Office applications but doing so with an F1 licence violates the licence terms. This creates audit exposure and must be enforced through Intune device management policies that prevent desktop app installation for F1-licensed users.

The Mailbox Restriction (F1)

F1's Exchange Online Kiosk mailbox has a 2 GB storage limit and limited functionality compared to Exchange Online Plan 1 (included in F3) and Plan 2 (included in E3 and above). Users who generate significant email volume or require calendar scheduling capabilities are not well-served by F1's Kiosk mailbox, and assigning F1 to these users creates both service quality issues and potential compliance questions around whether their usage exceeds the F1 mailbox entitlement.

F5 Add-Ons: Security and Compliance for Regulated Frontline Environments

Microsoft offers F5 Security and Compliance add-ons that layer advanced security and compliance capabilities onto F1 or F3 base licences for organisations in regulated industries. These add-ons are separate from F5 as an E SKU — they are add-on bundles for the F base plans, not a standalone licence tier.

Microsoft 365 F5 Security Add-On

The F5 Security add-on at $8 per user per month adds Defender for Office 365 P2, Defender for Identity, Defender for Cloud Apps, Entra ID P2, and advanced Defender for Endpoint capabilities to an F1 or F3 base licence. This is the right add-on for regulated frontline environments where BYOD security, identity protection, and threat detection are required — healthcare organisations where frontline workers access patient data, financial services environments where teller or branch staff access account systems, and government facilities with regulated access requirements.

Microsoft 365 F5 Compliance Add-On

The F5 Compliance add-on at $13 per user per month adds Microsoft Purview advanced compliance capabilities to F1 or F3: eDiscovery (Standard and Premium), Insider Risk Management, Communication Compliance, Advanced Audit, Customer Lockbox, and Data Loss Prevention for regulated data environments. This add-on is relevant for regulated industries where frontline worker communications must be monitored, archived, or subject to eDiscovery — financial services branch staff whose regulated communications must be retained, healthcare workers where HIPAA-governed communication retention is required, and government environments with FOIA or regulatory communication archival obligations.

F1 plus F5 Security plus F5 Compliance reaches $24 per user per month — a materially more capable and compliant frontline licence than F1 alone, but still $15 per user per month less than E3 for the frontline population where the use case justifies the full compliance stack.

F SKU in the Full M365 Licence Stack

Understanding where F SKUs sit in relation to the complete M365 stack — E1, E3, E5, E7, F1, F3 — is essential for EA structure and mixed deployment decisions.

F1 vs E1

E1 at $10.50 per user per month and F1 at $3 per user per month are both entry-level plans, but they serve fundamentally different user profiles. E1 includes web and mobile Office apps (same as F1), Exchange Online Plan 1 (full 50 GB mailbox with Outlook web access, not the Kiosk mailbox), and 1 TB OneDrive. E1 is intended for users who have a dedicated device and use email as a primary work tool but do not need desktop Office applications. F1 is specifically for the shared-device, limited-access frontline scenario with its Kiosk mailbox and 2 GB OneDrive. For users who have their own device and use email regularly, E1's full mailbox and larger storage justify the $7.50 per user per month premium over F1.

F3 vs E3

F3 at $10 per user per month and E3 at $39 per user per month both include desktop Office applications and full Exchange mailboxes. The key E3 advantages over F3 are: 100 GB Exchange mailbox versus F3's 50 GB, Exchange Online Plan 2 with archiving versus F3's Plan 1 without archiving, Azure Information Protection P1 for document classification, Entra ID P1 for Conditional Access policies, Microsoft 365 Business Voice capabilities for enterprise telephony, and Windows 11 Enterprise SA (Software Assurance) rights. For frontline workers who do not generate high email volumes, do not require document classification, and are not subject to strict Conditional Access policies, F3 delivers the core productivity capabilities at $29 per user per month less than E3. For supervisory roles with compliance or security requirements, E3 may be the right tier despite the cost premium.

Switching from F to E Plans: The Compliance Rules

Organisations that determine a frontline worker population has outgrown F plan capabilities and needs to transition to E plans must follow specific Microsoft licensing rules for the transition.

F-to-E Upgrade Path

Microsoft allows in-place licence upgrades from F1 to F3, from F3 to E3, and from any F plan to E3, E5, or E7. The upgrade adds the higher plan's capabilities to the user's account without requiring data migration, as all F and E plans share the same underlying Microsoft 365 services infrastructure. The user's existing Teams history, SharePoint content, OneDrive files, and Exchange mailbox data are preserved through the upgrade.

The critical compliance rule is that downgrading from an E plan to an F plan — moving a user from E3 to F3, for example — is technically supported but requires that the user meets the F plan usage restriction criteria after the downgrade. If the downgraded user continues to use a dedicated PC as their primary work device, the F plan restriction violation applies from the effective downgrade date. Downgrade timing must be coordinated with role changes, device reprovisionings, or redeployments that genuinely change the user's working environment to match the F plan profile.

E-to-F Conversion in the EA

Enterprise Agreements allow licence tier changes at the annual True-Up. Moving users from E3 to F3 at True-Up requires submitting the revised licence counts with the adjusted tier breakdown. Microsoft's EA terms do not require a formal justification for the tier change, but the compliance rules around F plan usage restrictions apply immediately upon the tier change. Organisations that convert large E3 populations to F3 as a cost-saving measure without conducting a role analysis risk creating both service quality issues and audit exposure simultaneously.

F SKU Audit Risk: What Microsoft Looks For

Microsoft's software asset management reviews and licensing audits have increasingly focused on F SKU compliance as the plans have grown in deployment. The three most common F SKU audit findings are: F1 users with dedicated PCs using desktop Office applications (a direct violation of F1's web-only application entitlement); organisations assigning F1 to reduce cost for a population that does not meet the shared-device or no-dedicated-PC usage criteria; and F plan users who have been assigned higher Microsoft add-on capabilities that require an E plan base entitlement rather than an F plan base.

The consequences of F SKU non-compliance in a Microsoft audit include retrospective licence uplift charges from the date of non-compliant usage, interest charges on the retroactive cost difference, and potential contractual penalties for material breach of EA terms. The financial exposure depends on the population size and the duration of non-compliance, but for organisations with large frontline populations incorrectly assigned to F1, the audit exposure can be substantial.

The mitigation is straightforward: conduct a role-by-role F SKU analysis before any large-scale F plan assignment, document the justification for each user's F plan assignment (shared device, no dedicated PC, limited application requirements), and enforce F1 usage restrictions through Intune policies that prevent desktop application installation on F1-licensed users' devices.

F SKU in Enterprise Agreement Negotiations

F plans should be included explicitly in EA structure and pricing negotiations. Several negotiation points are specific to the F SKU tier.

Separate F Plan Pricing Negotiation

F1 and F3 are cheap plans, but at enterprise scale the absolute spend is material. An organisation with 20,000 F3 users pays $2,400,000 per year at list price. Negotiating 10 to 15 percent discount on F3 saves $240,000 to $360,000 per year — worth the specific negotiation effort. Include F plan pricing as a separate negotiation line rather than allowing it to be bundled as a concession to the E plan negotiation.

F-to-E Upgrade Pricing Protection

Organisations that plan to convert frontline worker populations from F to E plans over the EA term — as digital transformation programmes extend E capabilities to frontline roles — should negotiate fixed upgrade pricing for the conversion. Securing E3 or E5 pricing at current rates as an option exercisable during the EA term protects against price increases when the conversion decision is made.

F5 Add-On Bundling

For regulated industry organisations that need F5 Security or Compliance add-ons for their frontline population, negotiate the F5 add-ons as bundle pricing alongside the F base plan rather than separately. Microsoft will provide better per-unit pricing for F1 plus F5 Security as a committed bundle than for F1 and the F5 add-on purchased at separate renewal points.

Frontline Worker AI: Copilot for F Plans

As of 2026, Microsoft 365 Copilot is not included in F1 or F3 base plans. Copilot requires a minimum of E3 as the base plan, and the full Copilot experience requires E5 or E7 at the E plan level. Frontline workers on F1 or F3 do not have access to Microsoft 365 Copilot through their base licence.

Microsoft has introduced more limited AI capabilities in Teams for frontline workers — including Copilot in Teams for meeting transcription and summarisation in some scenarios — but these are not the full Microsoft 365 Copilot experience. Frontline workers who genuinely require AI-assisted productivity capabilities at the level of knowledge worker Copilot need to be assessed for an E plan licence rather than an F plan, at the appropriate cost point.

This distinction matters for frontline worker digital transformation programmes. If the programme intends to deploy AI-assisted task management, predictive scheduling, or intelligent knowledge base access for frontline workers, the licence model may need to include Teams Premium (a add-on available for both F and E plans) for intelligent meeting features, or may require selective promotion of high-value frontline roles to E3 rather than maintaining F plan assignments. Our Microsoft licensing advisory practice advises on these transition points across the full M365 stack.