Microsoft 365 looks simple from the outside. Pick a licence, add a user, start working. Inside a real business, it quietly controls email, files, identity, collaboration, devices, and security — which is why the cheap-looking decisions have expensive consequences.
For South African SMBs, the product is rarely the problem. The problem is poor explanation. Licence names, NCE terms, mailboxes, Teams, MFA, admin roles, and security defaults all get bought without anyone translating them into plain language. This guide explains the decisions that actually matter before you buy, renew, or clean up a tenant — including the parts nobody tells you.
Start with the business problem
Many businesses start with the cheapest licence that appears to include email. That can work for a while. It becomes a problem when the business needs better security, device management, shared storage, compliance controls, or a clean leaver process.
The real issue is governance. A licence gives access. Governance decides whether users, files, devices, email, and admin roles are safe and manageable.
Rizonetech connects this work to Microsoft 365 services, managed IT, and DNS Shield. That matters because most technology problems do not stay inside one neat box. A website touches email. A cloud move touches identity. A support problem touches security and backups.
The plan lineup, decoded
The Microsoft 365 Business family has a small number of plans, and the differences are simple once stated plainly. All of them are capped at 300 users — past that, you are into the Enterprise plans.
- Business Basic — hosted email, Teams, OneDrive, SharePoint, and the web/mobile Office apps. No installed desktop Office apps.
- Business Standard — everything in Basic, plus the installed desktop Office apps. This is the “most popular” pick for a reason.
- Business Premium — everything in Standard, plus a serious security and device-management stack (more on that below).
- Apps for business — the Office apps and OneDrive, but no hosted Exchange email. Useful only in specific cases.
NCE: the terms that catch SMBs out
The New Commerce Experience (NCE) is how Microsoft 365 is now sold, and its commercial terms are where businesses get hurt. None of this is hidden — but almost nobody explains it before the order goes in.
- Annual vs monthly term is a real price difference. A monthly commitment costs roughly 20% more per user than an annual commitment. You are paying that premium for the right to change your mind month to month.
- The cancellation window is 7 calendar days. After you buy a subscription, you can cancel or reduce seats for a prorated refund only within the first 7 days. Miss that window on an annual term and you are committed — and paying — for the full year.
- You cannot drop seats mid-term on an annual commitment. If headcount falls, those licences keep billing until renewal. Buy for the team you have, not the team you hope to have.
- Subscriptions auto-renew. Renewal is the moment to right-size — review seats and terms before the date, not after.
The practical rule: commit annually for your stable core of users to capture the saving, and keep a small buffer on monthly terms for genuinely uncertain or seasonal headcount. That blend usually beats committing everyone to whichever term someone picked in a hurry. For the full breakdown, see our whitepaper, Microsoft 365 NCE for South African SMBs: licensing, true costs, and pitfalls.
Why Business Premium is usually the SMB sweet spot
Business Premium is the plan nobody explains properly, and it is often the best value in the lineup. On top of the Standard productivity apps, it bundles a security stack that SMBs otherwise buy — expensively — from three or four separate vendors:
- Microsoft Defender for Business — proper endpoint protection with detection and response, not just consumer antivirus.
- Microsoft Intune — device and mobile-app management, so lost laptops and phones are a manageable event, not a crisis.
- Entra ID P1 — Conditional Access, so you can require MFA, block risky sign-ins, and control access by location or device.
- Defender for Office 365 and data-loss-prevention — safer links and attachments in email, and guardrails on sensitive data.
Here is the part that actually matters: the most common Premium mistake is buying it and never switching the security on. Conditional Access, Intune enrolment, and Defender policies do not configure themselves. A business that pays for Premium but runs it unconfigured is paying enterprise prices for Standard-level protection. One honest note on scope — the advanced, risk-based Conditional Access (automatic responses to risky sign-ins) needs the higher Entra ID P2 tier, which is an add-on, not part of base Premium.
What it costs — and where the numbers really come from
Microsoft publishes its South African Business pricing in US dollars, excluding VAT. As a current reference, the annual-term list prices are roughly USD $6 per user/month for Business Basic, $12.50 for Standard, and $22 for Business Premium. Local partners bill in Rand at their own converted rate, so the ZAR figure on your invoice moves with the exchange rate and the reseller — which is exactly why we will not quote a single “official” Rand price. Add 15% VAT, and remember the monthly-term premium and the term-commitment rules above when you compare offers.
Beyond the licence itself, the cost that matters is the work around it: licence-mix design, security configuration, migration, and tenant cleanup.
Licence mix
A director, a finance user, a salesperson, a field worker, and a shared mailbox do not all need the same plan. Paying for too much is waste. Paying for too little creates risk. The mix should be designed by role, not guessed.
Security and identity
MFA, admin roles, recovery details, mailbox forwarding, guest access, and audit settings all affect risk and support scope. Weak identity settings are where most real breaches start.
Tenant cleanup
Old users, stale groups, unclear SharePoint sites, and unmanaged external sharing take time to clean. That work should be visible in the scope, not discovered later.
Where your data lives, and POPIA
For South African businesses, data location is a fair question to ask. South Africa is a Microsoft 365 local region, and for tenants set up with South Africa as their data geography, the core workloads — Exchange email, SharePoint, OneDrive, and Teams — are stored at rest in the South African data centres.
The nuance worth knowing: not every service follows. A few secondary services (such as Forms, Planner, and Viva Learning) default to other regions even for South African tenants. For POPIA purposes, Microsoft provides the infrastructure and contractual safeguards, but compliance is shared — your business remains the responsible party for how access, retention, and sharing are configured. Getting that configuration right is governance work, and it is part of what good Microsoft 365 support actually delivers.
How to reduce risk before you start
Before buying or renewing, review the tenant. Check users, roles, MFA, licences, DNS records, external sharing, shared mailboxes, and admin access.
Then explain the trade-offs in plain language. The business should know what is flexible, what is committed, and what needs support.
- Confirm which licences each role actually needs.
- Review NCE terms — annual vs monthly — before ordering.
- Protect admin accounts and recovery details.
- Check SPF, DKIM, and DMARC for mail trust.
- If you are on Premium, confirm the security is actually switched on.
- Document joiner and leaver steps.
How Rizonetech scopes the work
We start by turning the request into a plain-language scope. That means naming the business goal, the users affected, the systems involved, the risks that need attention, and the decisions that must be made before work starts. This protects the client and makes the quote easy to compare, because the work is visible.
The next step is to separate the urgent from the ongoing. A tenant often needs cleanup — MFA gaps, stale admins, unconfigured security — before steady-state support is fair. Naming that work up front keeps the cost honest.
The output is a written scope, not a vague promise. It shows what is included, what is excluded, what assumptions are being made, what access is needed, and how success will be checked.
What not to do
Do not buy technology by label alone. A WordPress site, Laravel application, Microsoft tenant, managed IT agreement, or Azure environment can be excellent or weak depending on how it is planned, configured, and supported. The name of the tool is not the outcome.
Also avoid choosing on sticker price alone. The cheapest licence is expensive if it leaves the business unprotected, and the most expensive licence is wasted if its security is never turned on. Match the plan and the term to the actual need.
What good delivery looks like
Good Microsoft 365 support is accountable. It explains licence choices, documents tenant settings, handles changes carefully, and ties support to the business process.
Rizonetech is a Microsoft Partner and can buy, deploy, manage, and support Microsoft 365 directly. The value is not only the licence — it is the governance around it.
For the support view, read the managed IT services guide. The best result comes when tenant administration and day-to-day support have one owner.
Questions to ask a provider
- Which licences does each role actually need?
- Annual or monthly term — and why, given our headcount?
- Who owns tenant admin access and recovery?
- Is MFA active for all users and protected for admins?
- If we are on Premium, is the security actually configured?
- Are SPF, DKIM, and DMARC configured correctly?
Review before approval
Before you approve a licence order or migration, ask for the assumptions in writing. The assumptions matter as much as the task list: access, third-party systems, response times from your team, data quality, security, and the point at which a change becomes new scope.
This is not bureaucracy. It is how good projects stay calm and how you avoid committing to the wrong term for the wrong users.
The practical next step
If you are unsure whether your tenant is clean — or whether you are over- or under-licensed — start with a review. That gives you a factual base for licence, security, and support decisions before the next renewal locks you in.
Microsoft 365 should make work easier and safer. It should not leave the business guessing about access, terms, files, or support.
FAQ
What is the difference between Business Standard and Business Premium?
Standard gives you the full Office apps, email, and collaboration. Premium adds a security and device-management stack — Defender for Business, Intune, and Entra ID P1 — that most SMBs would otherwise buy separately for more.
What is the real risk with NCE?
Committing the wrong way. After a 7-day window you cannot reduce seats mid-term on an annual commitment, and a monthly term costs about 20% more. Understand the term before you order.
Does Microsoft 365 include backups?
Microsoft provides the platform and resilience, but a true point-in-time backup and a clear recovery expectation still need to be reviewed against your business needs — do not assume it is covered.
Is our Microsoft 365 data stored in South Africa?
For a tenant set to the South Africa data geography, the core services (email, SharePoint, OneDrive, Teams) are stored at rest in South African data centres. A few secondary services default elsewhere, which matters for a thorough POPIA review.
Can you fix DNS records for Microsoft 365 mail?
Yes. DNS, SPF, DKIM, and DMARC are part of the domain-security work we handle through DNS Shield and Microsoft 365 support.
Next step: For licences, security and day-to-day help in one place, see Microsoft 365 support from Rizonetech.
Published 16 June 2026. Last updated 16 June 2026.