Microsoft 365 F3
Office 365 F3 plus Windows, Intune, and Entra ID for frontline devices — the frontline-worker counterpart to Microsoft 365 E3.
Variants
Same product, different region/billing/bundling flavor — the base SKU is listed first.
- Microsoft 365 F3 (this page)
- Microsoft 365 F3 EEA (no Teams) — EEA (no Teams)
Included products
Derived from the service plans Microsoft provisions with this SKU — Microsoft publishes no product-in-bundle mapping.
What's included
Curated capability groupings first, then every remaining service plan Microsoft provisions with this SKU — together they're the complete list, nothing is hidden.
| Identity |
|---|
| Conditional Access Advanced identity and access management: Conditional Access, group-based access management, and self-service password reset with on-premises write-back. Enforce sign-in rules (require MFA, block legacy auth, require a compliant device, restrict by location) based on user, app, and risk signals. |
| Multi-Factor Authentication Requires a second sign-in verification step (phone call, SMS, or app notification) in addition to a password. |
| Self-Service Password Reset With on-premises writeback (Entra ID P1) Advanced identity and access management: Conditional Access, group-based access management, and self-service password reset with on-premises write-back. Let users reset or unlock their own account without a help desk call. Basic cloud-only SSPR is available broadly; on-premises writeback (syncing the reset back to Active Directory) requires Entra ID P1. |
| Device Management |
| Intune Device Management Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Enroll, configure, and manage Windows, iOS, Android, and macOS devices: compliance policies, app deployment, and remote wipe. |
| Windows Autopilot Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Provision and configure new Windows devices out of the box, straight from the cloud, with no imaging. Autopilot itself has no separate license line item — it’s an Intune-dependent deployment workflow, mapped here to Intune Plan 1 as the plan that actually enables managing the enrolled device afterward. |
| BitLocker Management Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Centrally enforce BitLocker drive encryption policy and escrow recovery keys. BitLocker itself ships with Windows Pro/Enterprise; cloud-based policy and key escrow specifically need Intune, mapped here as the enabling plan since there’s no dedicated BitLocker-management license line item. |
| Universal Print Cloud-based print management that lets users print to registered printers without on-premises print servers. Cloud-based print management — no print servers, printer drivers pushed and managed centrally, permissions via Entra ID. |
| Productivity |
| Exchange Mailbox Kiosk |
| Teams (core / shared channels) Chat, meetings, calling, and file collaboration in shared team and channel workspaces. Chat, meetings, calling (within the org), and file collaboration — including shared channels for cross-team and cross-org collaboration without switching tenants. |
| Bookings Online appointment scheduling and calendar management for customer-facing bookings. A public-facing, self-service appointment-scheduling page synced to staff calendars — common for clinics, salons, and internal 1:1 scheduling. |
| Planner Task and project management with boards, buckets, and assignments for team-based work tracking. Kanban-style task boards for team work, integrated with Teams and Microsoft 365 Groups. |
| Power Apps / Power Automate (seeded) |
| Viva (core) The core Viva Engage (formerly Yammer) community and communication experience integrated into Microsoft 365. The employee-experience platform surfacing engagement, community, and knowledge-sharing (Viva Engage, the modernized Yammer) inside Microsoft 365. Viva has several separately licensed modules (Insights, Learning, Goals, Glint) beyond this core. |
| Other service plans |
| Office for the Web Browser-based versions of Word, Excel, PowerPoint, and OneNote for viewing and editing documents without installing desktop apps. |
| Azure Information Protection Premium P1 Classify and protect documents and email with sensitivity labels, including on-premises scanner support for protecting files at rest. |
| Azure Rights Management · RMS_S_ENTERPRISE Encrypts and applies usage restrictions (view-only, no-forward, expiration) to documents and email so protection travels with the file. |
| Microsoft Defender for Cloud Apps Discovery Discovers which cloud apps are actually being used in the organization, without the full Defender for Cloud Apps control capabilities. |
| Commercial data protection for Microsoft Copilot Extends Microsoft 365's commercial data-protection commitments (no training on customer data, tenant isolation) to Copilot prompts and responses. |
| Common Data Service · DYN365_CDS_O365_F1 |
| Common Data Service for Teams · CDS_O365_F1 |
| Microsoft 365 Lighthouse (Plan 1) A management portal for Managed Service Providers to monitor security, device compliance, and configuration across multiple customer tenants. |
| Microsoft Forms (Plan F1) |
| Microsoft Kaizala Pro · KAIZALA_O365_P1 |
| Microsoft Search Unified search across Microsoft 365 apps and connected data sources, including third-party content via Graph connectors. |
| Microsoft StaffHub A retired scheduling and shift-management tool for frontline teams, superseded by Shifts in Microsoft Teams. |
| Microsoft Stream for Office 365 F3 |
| Mobile Device Management for Office 365 Basic mobile device management for Office 365 apps and data — PIN/encryption enforcement and remote wipe of company data, without a full Intune deployment. |
| Nucleus An AI-generated recap of a meeting's transcript, notes, and action items in Outlook and Teams. |
| Office Mobile Apps for Office 365 |
| Power Virtual Agents for Office 365 · POWER_VIRTUAL_AGENTS_O365_F1 |
| Project for Office (Plan F) |
| SharePoint Kiosk |
| Skype for Business Online (Plan 1) |
| Sway A web-based app for creating interactive presentations, reports, and newsletters from text, images, and video. |
| To-Do (Firstline) |
| Viva Learning Seeded A hub inside Teams for discovering, sharing, and tracking learning content from Microsoft, LinkedIn Learning, and other providers. |
| Whiteboard (Firstline) |
| Windows 10 Enterprise E3 (Local Only) |
| Windows Autopatch Automates Windows, Microsoft 365 Apps, Edge, and Teams update deployment and testing across enrolled devices. |
| Windows Update for Business Deployment Service Cloud-orchestrated Windows update deployment with per-device rollout scheduling and safeguard holds. |
Conditional Access
Multi-Factor Authentication
Intune Device Management
Universal Print
Exchange Mailbox
Teams (core / shared channels)
Bookings
Planner
Power Apps / Power Automate (seeded)
Viva (core)