This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Identify the core features and objects of Microsoft 365 services (30–35%)
--> Identify the core objects of Microsoft 365 services
--> Explain how license types assigned to users and groups affect access to Microsoft 365 features
Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.
Introduction
Licensing is one of the most important administrative concepts in Microsoft 365. A user’s ability to access Microsoft 365 applications, services, security capabilities, and Copilot experiences depends largely on the licenses assigned to them.
Microsoft 365 administrators must understand:
- The different types of licenses available.
- How licenses can be assigned to users or groups.
- How licenses determine feature availability.
- What happens when licenses are removed or changed.
- How add-on licenses work.
Understanding licensing helps organizations control costs, ensure compliance, and provide users with the correct capabilities.
What Is a Microsoft 365 License?
A license is a subscription entitlement that grants access to Microsoft services and features.
Without a license, users generally cannot access Microsoft 365 workloads such as:
- Exchange Online
- SharePoint Online
- OneDrive
- Microsoft Teams
- Microsoft 365 Apps (Word, Excel, PowerPoint)
- Microsoft Defender services
- Microsoft Purview features
- Microsoft 365 Copilot
Each license contains one or more service plans that enable specific capabilities.
User-Based Licensing
The most common licensing model in Microsoft 365 is per-user licensing.
In this model:
- An administrator purchases subscriptions.
- Licenses are assigned to individual users.
- Users gain access to the services included in the license.
Example
| User | License Assigned | Available Services |
|---|---|---|
| Sarah | Microsoft 365 E3 | Exchange, Teams, SharePoint, Office apps |
| David | Microsoft 365 E5 | E3 services plus advanced security and compliance |
| Emma | No license | No Microsoft 365 services |
A user without a license cannot fully use Microsoft 365 workloads.
Common Microsoft 365 License Types
Microsoft 365 Business Basic
Provides:
- Web and mobile Office apps
- Exchange Online email
- Teams
- OneDrive
- SharePoint
Does not include desktop Office applications.
Microsoft 365 Business Standard
Includes:
- Everything in Business Basic
- Desktop Office applications
- Additional productivity features
Microsoft 365 Business Premium
Includes:
- Business Standard capabilities
- Microsoft Intune
- Microsoft Defender for Business
- Additional security features
Microsoft 365 E3
Designed for larger organizations and includes:
- Office desktop apps
- Exchange Online
- Teams
- SharePoint
- OneDrive
- Core compliance capabilities
Microsoft 365 E5
Includes everything in E3 plus:
- Advanced security
- Advanced compliance
- Enhanced analytics
- Additional Microsoft Defender capabilities
Because E5 contains more service plans, users receive access to more features.
How License Types Affect Feature Availability
Different licenses provide different capabilities.
Example 1: Security Features
| License | Advanced Security Features |
|---|---|
| Business Basic | Limited |
| E3 | Standard security |
| E5 | Advanced security and compliance |
Example 2: Compliance Features
Some Microsoft Purview capabilities require:
- E5 licenses
- Specific compliance add-ons
Users without those licenses cannot access those features.
Example 3: Desktop Applications
Business Basic users:
- Use Word and Excel online.
Business Standard users:
- Use both online and desktop versions.
Service Plans Within a License
A single license contains multiple service plans.
For example, Microsoft 365 E3 may include:
- Exchange Online
- SharePoint Online
- Teams
- OneDrive
- Office apps
Administrators can disable specific service plans while keeping the overall license assigned.
Example
A user may have:
- Exchange enabled ✓
- Teams enabled ✓
- Yammer disabled ✗
This allows organizations to tailor access without purchasing separate licenses.
Add-On Licenses
Some capabilities require additional licenses beyond the base subscription.
Examples include:
- Microsoft 365 Copilot
- Audio Conferencing
- Teams Premium
- Additional security services
A user must first have an eligible base license before an add-on license can be assigned.
Example
To use Microsoft 365 Copilot, users need:
- A qualifying Microsoft 365 license.
- A Microsoft 365 Copilot add-on license.
Without both requirements, Copilot functionality is unavailable.
Direct User License Assignment
Administrators can assign licenses directly to individual users.
Advantages
- Simple for small organizations.
- Easy to understand.
Disadvantages
- Time-consuming for large environments.
- Difficult to maintain consistency.
- Higher risk of administrative errors.
Group-Based Licensing
Microsoft Entra ID supports assigning licenses to groups.
Instead of assigning licenses individually:
- Create a group.
- Assign a license to the group.
- Add users to the group.
All group members automatically receive the license.
Example
Sales Group
Assigned:
- Microsoft 365 E3
- Microsoft 365 Copilot
When a new salesperson joins the group, the licenses are automatically applied.
Benefits of Group-Based Licensing
Simplified Administration
Administrators manage groups instead of individual users.
Consistency
Users performing similar roles receive identical services.
Automatic Provisioning
New users inherit licenses immediately after joining the group.
Easier Scaling
Large organizations can manage thousands of users efficiently.
Multiple Licenses for a User
Users may have multiple licenses simultaneously.
For example:
- Microsoft 365 E3
- Power BI Pro
- Microsoft 365 Copilot
Microsoft combines service plans and grants access to all included capabilities.
Removing a License
When a license is removed:
- Access to associated services stops.
- Features become unavailable.
- Data retention depends on Microsoft retention policies and subscription rules.
Example:
If a Teams license is removed, the user loses Teams access.
License Inheritance Through Groups
If a user belongs to multiple groups:
- They may inherit several licenses.
- Microsoft combines eligible service plans.
- Duplicate services are not charged twice.
This helps organizations avoid unnecessary complexity while ensuring access.
Viewing and Managing Licenses
Administrators can manage licenses through:
Microsoft 365 Admin Center
Used to:
- Assign licenses.
- Remove licenses.
- View available subscriptions.
- Monitor license consumption.
Microsoft Entra Admin Center
Used for:
- Group-based licensing.
- Managing group memberships.
- Automating license assignments.
Licensing and Microsoft 365 Copilot
Microsoft 365 Copilot is licensed separately.
Requirements include:
Base License
Examples:
- Microsoft 365 E3
- Microsoft 365 E5
- Business Standard
- Business Premium
Copilot License
A Microsoft 365 Copilot add-on must also be assigned.
If either requirement is missing, Copilot features are unavailable.
Key Exam Tips
Remember these points for AB-900:
- Licenses determine access to Microsoft 365 services.
- Different license types provide different capabilities.
- Service plans exist inside licenses.
- Users can have multiple licenses.
- Group-based licensing simplifies administration.
- Add-on licenses may require prerequisite subscriptions.
- Microsoft 365 Copilot requires both a qualifying base license and a Copilot license.
- Removing licenses removes access to associated services.
Practice Exam Questions
Question 1
What primarily determines which Microsoft 365 services a user can access?
A. Their device type
B. Their assigned licenses
C. Their network location
D. Their browser version
Correct Answer: B
Explanation: Microsoft 365 services and features are determined by the licenses assigned to the user.
Question 2
A company wants all members of the Marketing department to automatically receive the same Microsoft 365 subscription when they are hired. Which approach should be used?
A. Shared mailboxes
B. Conditional Access
C. Group-based licensing
D. Device registration
Correct Answer: C
Explanation: Group-based licensing automatically assigns licenses to users who become members of a group.
Question 3
Which statement about Microsoft 365 E5 compared to Microsoft 365 E3 is true?
A. E5 typically includes additional advanced capabilities.
B. E5 contains fewer service plans.
C. E5 supports only web applications.
D. E5 cannot be combined with other licenses.
Correct Answer: A
Explanation: E5 generally provides more advanced security, compliance, and analytics features than E3.
Question 4
A user has no Microsoft 365 license assigned. What is the likely result?
A. The user receives read-only access to all services.
B. The user receives Teams access only.
C. The user automatically receives Business Basic.
D. The user cannot fully access Microsoft 365 services.
Correct Answer: D
Explanation: Users generally require licenses to access Microsoft 365 workloads.
Question 5
What are service plans?
A. Backup copies of subscriptions
B. Billing reports for administrators
C. Individual capabilities contained within a license
D. Device management policies
Correct Answer: C
Explanation: A license consists of multiple service plans that provide access to specific workloads.
Question 6
Which administrative benefit is provided by group-based licensing?
A. It eliminates the need for Microsoft Entra ID.
B. It reduces manual license assignment efforts.
C. It prevents users from joining groups.
D. It removes all subscription costs.
Correct Answer: B
Explanation: Administrators can manage licenses for groups instead of assigning them individually.
Question 7
A user has both Microsoft 365 E3 and Power BI Pro licenses assigned. What happens?
A. Only the newest license is used.
B. One license automatically replaces the other.
C. Access is granted to capabilities from both licenses.
D. The user account becomes disabled.
Correct Answer: C
Explanation: Microsoft combines service entitlements from multiple licenses.
Question 8
What additional requirement is needed for a user to access Microsoft 365 Copilot?
A. A Windows Server license
B. A SharePoint Server CAL
C. A Dynamics 365 license
D. A Microsoft 365 Copilot add-on license
Correct Answer: D
Explanation: Copilot requires both a qualifying base subscription and the Copilot add-on license.
Question 9
What usually occurs after a license is removed from a user?
A. The user’s password changes automatically.
B. Group memberships are deleted.
C. Access to associated services is lost.
D. The user account is permanently deleted.
Correct Answer: C
Explanation: Removing a license removes access to the services provided by that license.
Question 10
Which portal is commonly used to configure group-based licensing?
A. Microsoft Entra Admin Center
B. Exchange Admin Center
C. Power Platform Admin Center
D. Windows Admin Center
Correct Answer: A
Explanation: Microsoft Entra Admin Center supports group creation and group-based license assignment.
Go to the AB-900 Exam Prep Hub main page

