Licensing Requirements for B2C Users on SharePoint Safe Attachments
Question details
Organizations need to clarify the Microsoft 365 E5 licensing requirements for consumer (B2C) users who access sites and upload documents protected by SharePoint Safe Attachments.

- Product
- SharePoint Online / Microsoft 365 E5
- Device & OS
- not provided
- Scenario
- Allowing external consumer users to access SharePoint sites and securely upload documents without violating licensing terms.
- Observed behavior
- Administrators need to confirm if B2C users require specific standalone licenses or if they are covered under the tenant's existing Safe Attachments configuration before granting upload permissions.
Ensure you have Global Administrator or Billing Administrator privileges in the Microsoft 365 admin center to review your current subscription details.
Verify External User Licensing and Tenant Configuration
Review your Microsoft 365 E5 licensing agreements and Azure AD External Identities configuration to ensure compliance for B2C user document uploads.
Safe Attachments is a premium security feature included in Microsoft Defender for Office 365 Plan 2 (part of E5). Licensing for external, B2B, and B2C identities can vary significantly depending on your specific Azure AD billing model, access methods, and overall tenant configuration.
Navigate to the Microsoft 365 Admin Center (admin.microsoft.com) and log in with your administrator credentials.
Click on 'Billing' in the left-hand navigation menu, then select 'Your products' or 'Licenses' to verify your current Microsoft 365 E5 and Defender for Office 365 active licenses.
Open the Azure portal and navigate to Azure Active Directory > External Identities. Review your linked subscription to see if you are utilizing the Monthly Active Users (MAU) billing model for B2B/B2C users.
Because external user rights for premium security workloads can change, contact your organization's Microsoft licensing specialist or account manager to explicitly confirm coverage for B2C document uploads triggering Safe Attachments.

Looking for a straightforward way to collaborate on documents?
Enterprise licensing for external users can be complex and expensive. If you simply need a reliable way to create, edit, and share documents with external clients or consumers, consider WPS Office. It is a highly compatible, free alternative that eliminates the headache of complex user licensing.
- 1. Download the software: Visit the official WPS Office website to download the free installer for your operating system.
- 2. Install WPS Office: Run the setup file and follow the straightforward on-screen instructions to install the suite.
- 3. Share documents effortlessly: Open your existing Office files in WPS and share them with external clients without worrying about enterprise tenant licensing restrictions.

Frequently Asked Questions
What is Safe Attachments for SharePoint?
Safe Attachments is a feature of Microsoft Defender for Office 365 that provides an additional layer of protection by scanning files uploaded to SharePoint Online, OneDrive for Business, and Microsoft Teams for malicious content.
Do B2C users need their own E5 license to upload files to SharePoint?
Typically, external B2C/B2B users do not need their own E5 licenses to interact with your SharePoint environment. Their access is usually governed by Azure AD External Identities pricing (like MAU). However, the host tenant must be properly licensed for Defender for Office 365 to cover the storage workload being protected.
What happens if an external user uploads a malicious file?
If Safe Attachments detects a malicious file uploaded by any user, it locks the file. The file remains in the document library, but users are prevented from opening, copying, moving, or sharing it, effectively containing the threat.




