E8 Macro License Requirements

If you’re working towards Essential 8 Level 2 compliance, you’ve probably hit the macro management requirement and wondered exactly what Microsoft licenses you need to make it work. It’s a fair question, and one that catches a lot of Australian businesses off guard.The short answer is that even Microsoft 365 Business Premium won’t cut it. You’ll need to step up to Enterprise licensing or add enterprise apps to your existing Business Premium. Let’s break down what you actually need and why.

What Essential 8 Level 2 Actually Requires for Macros

According to the Australian Signals Directorate, Level 2 compliance means you need to allow Office macros only from trusted locations or digitally signed by a trusted publisher. This isn’t something you can achieve by just telling users to be careful. You need proper technical controls that enforce these restrictions across your entire organisation.

The challenge is that implementing these controls requires not just centralised policy management, but also enterprise level application controls. You need to be able to push configuration settings to all your devices, manage trusted locations, control which publishers are approved, and enforce enterprise app policies. This is where your licensing becomes critical.

Why Business Premium Isn’t Enough

This catches a lot of people by surprise. Microsoft 365 Business Premium includes Intune and plenty of security features, so it seems like it should handle Essential 8 requirements. The problem is that proper macro control for Level 2 compliance requires enterprise application management capabilities that are only available in the Enterprise licensing tier.

Specifically, you need access to enterprise app controls and policies that let you manage Office applications at the enterprise level. Business Premium licenses are limited to business tier features, which don’t include the granular control over trusted publishers and enterprise app settings required for proper compliance.

We’ve seen businesses invest in Business Premium thinking they’re sorted for compliance, only to discover during an audit or security assessment that they can’t actually meet the Level 2 requirements with their current licensing.

Your Licensing Options for Compliance

You’ve got three main paths to get the enterprise app controls you need for Essential 8 Level 2 compliance, and each has different cost implications depending on your situation.

Option 1: Microsoft 365 Enterprise E3

E3 is the minimum Enterprise license that gives you the enterprise app management capabilities and policy controls required to enforce macro restrictions properly. It includes everything in Business Premium plus the enterprise level controls you need.

For businesses already on Business Premium, this represents a step up in cost. However, E3 brings additional capabilities beyond just macro management that help with other Essential 8 requirements, including advanced compliance tools and information protection features.

Option 2: Microsoft 365 Enterprise E5

Here’s where it gets interesting. E5 costs more than E3, but when you look at what you’re actually getting, it often represents better value for businesses serious about security and compliance.

E5 includes everything in E3 plus advanced threat protection, enhanced compliance tools, and built-in security features that directly address multiple Essential 8 requirements. If you’re planning to implement the full Essential 8 framework properly, you’ll likely find yourself needing many of the features that E5 includes anyway.

For example, E5’s advanced threat protection helps with application control and patch management requirements. The enhanced security features support multi-factor authentication and privileged access management. Rather than licensing these capabilities separately on top of E3, E5 bundles them in a way that often works out more cost effective.

Option 3: Business Premium Plus Enterprise Apps

If you’re already invested in Business Premium and want to avoid the full jump to Enterprise licensing, there’s a middle path. You can purchase Microsoft 365 Apps for Enterprise as a standalone add-on to your Business Premium licenses.

This approach gives you the enterprise app controls needed for macro management while keeping your Business Premium benefits. It’s typically cheaper than moving entirely to E3, making it attractive for smaller businesses with tight budgets.

The downside is that you’re managing two separate license types, and you’ll still miss out on some of the advanced compliance and security features that come with full Enterprise licensing. It’s a valid path for achieving Essential 8 Level 2 compliance, but you need to weigh whether the cost savings justify the limitations.

Making the Right Choice for Your Business

The best licensing approach depends on your specific situation. If you’re a smaller business focused purely on achieving Level 2 compliance with minimal investment, Business Premium plus Enterprise Apps might be your most cost effective path.

For medium to larger businesses, or those targeting Level 3 compliance, E5 often provides better overall value than E3. The additional security and compliance features included in E5 directly support other Essential 8 requirements and reduce the need for third-party tools.

Before making any licensing decisions, it’s worth getting a comprehensive assessment of your current Microsoft 365 environment and your compliance requirements across the entire Essential 8 framework. This helps you understand which features you actually need and avoid paying for capabilities you won’t use.

You might also identify opportunities to optimise licensing by determining which users need Enterprise level licenses versus those who can remain on lower tiers. Not everyone in your organisation necessarily needs the same level of licensing.

Getting Your Licensing and Compliance Right

The jump from Business Premium to Enterprise licensing, or even adding Enterprise Apps, represents a real investment. However, attempting to achieve compliance without proper licensing creates bigger problems. You can’t demonstrate the auditable, centralised controls that auditors expect, and you’ll be exposed to the security risks that Essential 8 is designed to mitigate.

At Think Technology, we help Australian businesses navigate these licensing decisions and implement Essential 8 controls properly. We can assess your current setup, identify compliance gaps, and recommend the most cost-effective licensing approach that actually meets your needs without overspending on features you don’t require.

Need help working out your Essential 8 licensing requirements? Contact us for a straightforward conversation about what you actually need, without the sales pitch.