logo
search
License & Subscription Issues

Licensing Requirements for B2C Users on SharePoint Safe Attachments

Natalie TaylorNatalie Taylor Oct 16, 2026 869 views

Question details

Organizations need to clarify the Microsoft 365 E5 licensing requirements for consumer (B2C) users who access sites and upload documents protected by SharePoint Safe Attachments.

Licensing B2C Users for SharePoint Safe Attachments
Product
SharePoint Online / Microsoft 365 E5
Device & OS
not provided
Scenario
Allowing external consumer users to access SharePoint sites and securely upload documents without violating licensing terms.
Observed behavior
Administrators need to confirm if B2C users require specific standalone licenses or if they are covered under the tenant's existing Safe Attachments configuration before granting upload permissions.
Before you start

Ensure you have Global Administrator or Billing Administrator privileges in the Microsoft 365 admin center to review your current subscription details.

Solution 1Recommended

Verify External User Licensing and Tenant Configuration

Review your Microsoft 365 E5 licensing agreements and Azure AD External Identities configuration to ensure compliance for B2C user document uploads.

Safe Attachments is a premium security feature included in Microsoft Defender for Office 365 Plan 2 (part of E5). Licensing for external, B2B, and B2C identities can vary significantly depending on your specific Azure AD billing model, access methods, and overall tenant configuration.

1
Access the Microsoft 365 Admin Center

Navigate to the Microsoft 365 Admin Center (admin.microsoft.com) and log in with your administrator credentials.

2
Review active subscriptions

Click on 'Billing' in the left-hand navigation menu, then select 'Your products' or 'Licenses' to verify your current Microsoft 365 E5 and Defender for Office 365 active licenses.

3
Check External Identities billing model

Open the Azure portal and navigate to Azure Active Directory > External Identities. Review your linked subscription to see if you are utilizing the Monthly Active Users (MAU) billing model for B2B/B2C users.

4
Consult a Microsoft licensing specialist

Because external user rights for premium security workloads can change, contact your organization's Microsoft licensing specialist or account manager to explicitly confirm coverage for B2C document uploads triggering Safe Attachments.

Verify External User Licensing and Tenant Configuration
Important Licensing Note: Microsoft's licensing rules for external users generally allow free access up to a certain ratio (e.g., 1:5) or via MAU, but advanced compliance and security features like Safe Attachments may require the tenant-level service to be appropriately licensed for the workload rather than the individual external user.
Free Microsoft Office alternative

Looking for a straightforward way to collaborate on documents?

Enterprise licensing for external users can be complex and expensive. If you simply need a reliable way to create, edit, and share documents with external clients or consumers, consider WPS Office. It is a highly compatible, free alternative that eliminates the headache of complex user licensing.

  1. 1. Download the software: Visit the official WPS Office website to download the free installer for your operating system.
  2. 2. Install WPS Office: Run the setup file and follow the straightforward on-screen instructions to install the suite.
  3. 3. Share documents effortlessly: Open your existing Office files in WPS and share them with external clients without worrying about enterprise tenant licensing restrictions.
Avoid complex B2C licensing rules for basic document collaboration.Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight, fast, and completely free for standard user tasks.Built-in PDF editing and seamless cross-platform support.
microsoft office alternative - wps office

Frequently Asked Questions

What is Safe Attachments for SharePoint?

Safe Attachments is a feature of Microsoft Defender for Office 365 that provides an additional layer of protection by scanning files uploaded to SharePoint Online, OneDrive for Business, and Microsoft Teams for malicious content.

Do B2C users need their own E5 license to upload files to SharePoint?

Typically, external B2C/B2B users do not need their own E5 licenses to interact with your SharePoint environment. Their access is usually governed by Azure AD External Identities pricing (like MAU). However, the host tenant must be properly licensed for Defender for Office 365 to cover the storage workload being protected.

What happens if an external user uploads a malicious file?

If Safe Attachments detects a malicious file uploaded by any user, it locks the file. The file remains in the document library, but users are prevented from opening, copying, moving, or sharing it, effectively containing the threat.