The licence line is the easiest number to get right in a Microsoft 365 project, and the least important. A 50-person business on Microsoft 365 Business Premium is committing roughly $19,700 a year in licensing before anyone touches a device policy. What determines whether that money buys anything is whether the security and management features inside the plan are configured, enforced and monitored — or whether they sit dormant while everyone keeps using consumer antivirus and unmanaged laptops.
Here is what the stack actually costs in Australia right now, what each step up buys, and where the money leaks.
The three Business plans, in dollars
Microsoft's Australian pricing, ex-GST, on annual commitment as listed in August 2026:
| Plan | Annual commitment (per user/month) | Month-to-month |
|---|---|---|
| Business Basic | AU$9.00 | AU$10.80 |
| Business Standard | AU$18.70 | AU$22.44 |
| Business Premium | AU$32.90 | AU$39.48 |
Buying through a telco or reseller shifts the number. Telstra lists Business Premium at AU$38.01 per user per month GST-inclusive on a 12-month term, unchanged by its 1 July 2026 price rise, while Basic and Standard went up. That is a useful sanity check when you are handed an MSP quote: if the per-user licence line is well above the Telstra retail number, ask what else is in it.
Also worth knowing that Microsoft ran a global pricing and packaging update effective 16 February 2026, which changed SKU structures including Office suites sold without Teams. Any pricing table you find from 2023 or 2024 is now wrong in at least one direction, and usually understates.
The Basic-to-Standard step is simple: Standard adds the desktop Office applications. If your staff work in a browser and Teams all day, Basic genuinely is enough. The Standard-to-Premium step is the one people misjudge.
What the Premium uplift actually buys
The gap between Standard and Premium is AU$14.20 per user per month on annual billing. For that, Business Premium now formally bundles Microsoft Intune, Defender for Business and Microsoft Entra ID P1. Anything you read describing Business Premium as "Office plus a bigger mailbox" predates this and should be discarded.
In practical terms, those three components give you:
- Entra ID P1 — Conditional Access. This is the control that lets you say "no sign-in from an unmanaged device", "no legacy authentication", "MFA every time from outside the corporate network". Without P1 you are limited to security defaults, which are better than nothing and considerably less than a policy set.
- Intune — device enrolment and compliance for Windows, macOS, iOS and Android; disk encryption enforcement; application deployment; app protection policies for personally owned phones; and remote wipe when someone leaves.
- Defender for Business — endpoint detection and response, not just signature antivirus. Alerts, isolation, investigation.
Bought at 50 users, the Premium uplift over Standard costs about $8,500 a year. Standalone, Intune Plan 1 alone is AU$11 per user per month. So the bundle is priced well. The catch is that it is priced well only if you turn the components on, and the most common failure we see in the Australian SME market is exactly that: Business Premium purchased across the whole business, Intune enrolment sitting at a handful of devices, Conditional Access untouched, and Defender for Business unconfigured while everyone still runs whatever antivirus came with the machine. That business is paying Premium prices for Standard functionality.
Copilot: roughly a $15 uplift, and a governance question
Microsoft's Australian SMB pricing lists Business Premium with Copilot at AU$47.90 per user per month paid yearly, ex-GST, and Business Standard with Copilot at AU$35.20. Microsoft's bundle page separately shows Business Premium and Copilot Business marked down from AU$64.40 to AU$47.93 per user per month, so current pricing is promotional and packaging has moved recently.
Call it an AU$15 per-user uplift on Premium. At 50 users that is $9,000 a year — roughly the same as the entire Standard-to-Premium security uplift.
Two things worth knowing before you sign for the whole headcount. First, Microsoft's ANZ compliance guidance confirms that Copilot for Microsoft 365 operates within the security and compliance context of the existing Office applications and inherits your existing controls — it does not create a separate data silo, and it does not bypass your permissions. That is reassuring and also a warning: Copilot surfaces whatever a user can already reach. If your SharePoint and Teams permissions are loose, Copilot makes that looseness efficient. The same guidance notes Copilot will not operate on macro-enabled Office documents, which lines up with ACSC's long-standing position on macros.
Second, deploy Copilot to a defined group first. Usage in a broad rollout tends to concentrate in a minority of staff while the business pays for everyone. A 15-user pilot at AU$15 uplift costs about $2,700 a year and tells you which roles get real value before you commit $9,000.
Intune Suite: only if you have a reason
Intune Plan 2 is an AU$4.50 per-user-per-month add-on to Plan 1, and the Intune Suite is AU$15 per user per month on top of Plan 1, bundling Plan 2 with capabilities that used to be sold separately — advanced endpoint analytics, remote help and similar. Business Premium already includes Plan 1, so the Suite is an add-on, not a replacement.
For most 20-to-100-person businesses, Plan 1 inside Business Premium is the right answer, and the Suite is something to revisit once basic compliance policies are stable. One thing to check on your current invoice: some SMEs end up paying for standalone Intune alongside Business Premium for the same people. That is straight double-licensing and worth auditing.
The realistic per-user bands
Licensing only, ex-GST, annual commitment:
| Profile | Per user/month |
|---|---|
| Frontline or browser-only worker (Basic) | AU$9.00 |
| Standard information worker (Standard) | AU$18.70 |
| Managed, secured worker (Premium) | AU$32.90 |
| Premium plus Copilot | ~AU$47.90 |
| Premium, Copilot and Intune Suite | ~AU$62–63 |
Backup, security operations and support sit on top of all of those.
The single largest saving available to most businesses is not negotiating the licence price — it is segmenting the user base. A warehouse team on shared devices, a field crew who only need email and Teams on a phone, and a finance team handling payment approvals do not need identical plans. Businesses that put all 60 people on Premium because it is simpler are typically overspending against a mixed model by a meaningful margin, and businesses that put all 60 on Standard because it is cheaper have no Conditional Access anywhere, including on the finance team.
The work that turns licences into controls
Assume the licences are correct. What still has to happen:
- Enrol devices in Intune and build compliance policies that do not break line-of-business applications. This is where rollouts stall — a rushed baseline blocks an app the sales team depends on, and the business abandons Intune rather than fix the policy.
- Design Conditional Access deliberately: which sign-ins require a compliant device, which require MFA, what the break-glass account looks like. Getting this wrong locks people out; not doing it at all leaves credential theft as a live path in despite Premium licensing.
- Configure Defender for Business, then actually work the alerts. EDR generates output that somebody has to triage.
- Build an off-boarding workflow that wipes and reassigns devices, rather than a spreadsheet and good intentions.
- Set up app protection policies for personally owned phones — and tell staff before you do, because a remote wipe nobody was warned about is a HR problem.
This is the part where device management, identity policy and endpoint security configuration either happens properly or the licence spend becomes a line item with nothing behind it. Expect a mixed fleet to need staged pilot groups, application testing across hardware and OS combinations, and ongoing policy tuning as operating systems update.
Two more gaps worth naming. Being on Microsoft 365 is not the same as meeting the Essential Eight — MFA is often not enforced tenant-wide, local admin rights are usually still in place, and application control is rarely implemented. And native Microsoft 365 retention and versioning protect against accidental deletion, but they are not point-in-time independent backups. If you have never defined a Recovery Point Objective or tested a large restore, you do not know what a ransomware event costs you in days.
Where to start
Pull your current Microsoft 365 invoice and your Intune device compliance report side by side. Count licensed users on Business Premium, then count devices actually enrolled and compliant. The gap between those two numbers, multiplied by AU$14.20 a month, is what you are currently paying for capability you are not receiving.
If that gap is uncomfortable, we will do the sums with you. Precision IT can run a licensing and configuration review across your tenant that returns three things: a per-user plan mix matched to how your people actually work, a dollar figure for the change, and a plain assessment of which Premium features are worth switching on first against Essential Eight. If the answer is that your current setup is fine, we will tell you that. Ask us for a scoped review and we will come back with numbers you can put in front of the board.