Why Microsoft 365 buying goes wrong
Microsoft 365 is rarely the problem. The buying is. Businesses commit to the wrong term, over-license some staff while under-protecting others, pay a monthly premium they did not need, and leave powerful security features switched off. None of this is hidden in fine print — it is simply never explained before the order goes in. This paper is the explanation, written for South African conditions. It is the deeper companion to our overview, Microsoft 365 for South African SMBs.
The New Commerce Experience, mechanics first
The New Commerce Experience (NCE) is the model under which Microsoft 365 is now sold through partners. Two terms get conflated and should not be: the commitment term (how long you are locked in) and the billing plan (how often you pay). You can commit annually but still pay monthly, for example. The commitment term is where the money is won or lost.
- The monthly-term premium. A month-to-month commitment costs roughly 20% more per user than an annual commitment. That premium buys flexibility — the freedom to cancel or change seats each month. If your headcount is stable, you are paying for flexibility you will never use.
- The 7-day window. After buying a subscription, you can cancel or reduce seats for a prorated refund only within the first 7 calendar days. After that, an annual commitment runs — and bills — for the full year.
- No mid-term seat reduction. On an annual term, if someone leaves, that licence keeps billing until renewal. You cannot simply drop it.
- Auto-renewal. Subscriptions renew automatically. Renewal is the one moment you can right-size cleanly, so it should be a diarised review, not a surprise.
The practical strategy that falls out of this: commit your stable core of users annually to capture the saving, and keep a small buffer of genuinely uncertain or seasonal seats on monthly terms. One blended decision, made deliberately, beats committing everyone to whichever term was picked under time pressure.
Choosing a plan
The Microsoft 365 Business family is small and the distinctions are clear once stated plainly. Every Business plan is capped at 300 users; beyond that you move to the Enterprise (E3/E5) plans.
- Business Basic — hosted Exchange email, Teams, OneDrive, SharePoint, and the web and mobile Office apps. No installed desktop Office apps.
- Business Standard — everything in Basic plus the installed desktop Office apps and tools like webinars and Clipchamp. The default choice for most office staff.
- Business Premium — everything in Standard plus a serious security and device-management stack. The most misunderstood plan, and often the best value.
- Apps for business — the Office apps and OneDrive without hosted email. Niche.
The right answer is almost never one plan for everyone. A director, a field worker, a finance user, and a shared reception mailbox have different needs. Designing the licence mix by role is where real money is saved without creating risk.
Why Business Premium is usually the smart buy
Business Premium bundles a security stack that SMBs otherwise assemble — expensively — from several separate vendors. Inside the single Premium licence you get:
- Microsoft Defender for Business — genuine endpoint protection with detection and response, not consumer antivirus.
- Microsoft Intune — device and mobile-app management, so a lost laptop is a managed event rather than a breach.
- Entra ID P1 — Conditional Access to require MFA, block risky sign-ins, and gate access by device or location.
- Defender for Office 365 and data-loss prevention — safer links and attachments in email, and guardrails on sensitive information.
Two honest caveats keep this accurate. First, the most common Premium mistake is buying it and never switching the security on — Conditional Access, Intune enrolment, and Defender policies have to be configured, and an unconfigured Premium tenant runs at Standard-level protection while paying Premium prices. Second, the advanced, risk-based Conditional Access (automatic responses to risky sign-ins) needs the higher Entra ID P2 tier, which is an add-on rather than part of base Premium. Premium is excellent value — but only when it is turned on and understood.
What it really costs in South Africa
Here is a detail that trips up local buyers: Microsoft publishes its South African Business pricing in US dollars, excluding VAT. As a current reference, the annual-term list prices are roughly USD $6 per user per month for Business Basic, $12.50 for Business Standard, and $22 for Business Premium. Local partners bill in Rand at their own converted rate, so the figure on your invoice moves with the exchange rate and the reseller. That is why no honest provider should quote you a single fixed “official” Rand price as if it were Microsoft’s.
When you compare offers, normalise for three things: the term (annual vs monthly, with its ~20% gap), VAT (add 15%), and what management is included. A licence resold with no configuration, security setup, or support is cheaper for a reason — the work still has to happen, and it will land on someone.
Where your data lives, and POPIA
South Africa is a Microsoft 365 local region. For a tenant configured with South Africa as its data geography, the core workloads — Exchange email, SharePoint, OneDrive, and Teams — are stored at rest in the South African data centres. That materially helps a POPIA data-residency position.
The nuance that matters for a thorough review: not every service follows the core. A few secondary services — such as Forms, Planner, and Viva Learning — default to other regions even for South African tenants. For POPIA, the division of responsibility is the key idea: Microsoft provides the infrastructure, the local regions, and contractual safeguards, but your business remains the responsible party for how access, retention, sharing, and security are actually configured. Compliance is an outcome of configuration, not a checkbox at purchase.
The five mistakes worth avoiding
- Committing annually, then needing to cut seats — locked until renewal because the 7-day window closed.
- Paying the monthly premium permanently on stable headcount, when an annual term would save roughly 20%.
- Under-licensing security — buying Standard and bolting on third-party antivirus, MFA, and device management that Premium would have included for less.
- Buying Premium and never enabling it — paying for protection that sits switched off.
- Assuming all data is in South Africa — core workloads are, but a few services default to Europe, which matters for a careful POPIA assessment.
A simple decision framework
Before the next purchase or renewal, answer five questions in order: Which plan does each role need? Which seats are stable enough to commit annually? Is the security that you are paying for actually configured? Are SPF, DKIM, and DMARC set so your mail is trusted? And does your data-residency posture match what POPIA requires of your business? If those five have clear answers, the licensing decision is no longer a guess.
How Rizonetech approaches this
As a Microsoft Partner, we can buy, deploy, manage, and support Microsoft 365 directly — but the value we add is not the licence, it is the governance around it: the role-based licence design, the security actually switched on, the clean tenant, and the renewal discipline. Microsoft 365 sits at the centre of most managed-IT engagements, which is why we treat the two as one conversation — see our managed IT guide — and why identity decisions made here carry straight into Azure governance.
The next step
If you are unsure whether you are over- or under-licensed, or whether your tenant is clean and secure, start with a review rather than a renewal. It gives you a factual base for every licence, security, and support decision — before the next term locks you in.
Next step: Before your next NCE renewal, ask Rizonetech for a licence review and Microsoft 365 support, so the commitment matches the people and features you actually use.
Published 16 June 2026. Last updated 16 June 2026.