What the SkuPartNumber values from Get-MgSubscribedSku actually mean. Microsoft's internal part numbers predate several rounds of product renaming, so the names PowerShell shows you and the names on the invoice rarely match.
Three traps catch almost everyone. O365_BUSINESS_PREMIUM is Microsoft 365 Business Standard, not Business Premium, because the part number kept the old Office 365 product name when the plans were renamed in 2020. SPE_F1 is Microsoft 365 F3 for the same reason. And ENTERPRISEPACK (Office 365 E3) is not SPE_E3 (Microsoft 365 E3); the SPE prefix marks the Microsoft 365 suites that bundle Windows and EMS on top of Office 365.
Type to filter. Matches part numbers, product names and notes.
| SkuPartNumber | Product name | Notes |
|---|---|---|
| Microsoft 365 for business (SMB, 300-seat cap) | ||
| O365_BUSINESS_ESSENTIALS | Microsoft 365 Business Basic | Formerly Office 365 Business Essentials. Web and mobile apps only, no desktop Office. |
| O365_BUSINESS_PREMIUM | Microsoft 365 Business Standard | The classic trap: PREMIUM in the part number, Standard on the invoice. |
| SPB | Microsoft 365 Business Premium | The actual Business Premium: Business Standard plus Intune, Entra ID P1 and Defender for Office 365 P1. |
| O365_BUSINESS | Microsoft 365 Apps for Business | Desktop Office only, no mailbox. Also appears as SMB_BUSINESS in some tenants. |
| OFFICESUBSCRIPTION | Microsoft 365 Apps for Enterprise | Formerly Office 365 ProPlus. Desktop Office only, no mailbox. |
| Office 365 Enterprise | ||
| STANDARDPACK | Office 365 E1 | Web apps, 50 GB mailbox, no desktop Office. |
| ENTERPRISEPACK | Office 365 E3 | Not Microsoft 365 E3; that is SPE_E3. No Windows or EMS in this one. |
| ENTERPRISEPREMIUM | Office 365 E5 | Includes Defender for Office 365 P2, audio conferencing and Power BI Pro. |
| DESKLESSPACK | Office 365 F3 | Frontline. 2 GB mailbox, web apps, kiosk-style limits. |
| Microsoft 365 Enterprise and Frontline | ||
| SPE_E3 | Microsoft 365 E3 | Office 365 E3 plus Windows Enterprise plus EMS E3. |
| SPE_E5 | Microsoft 365 E5 | The full stack including E5 Security and E5 Compliance. |
| SPE_F1 | Microsoft 365 F3 | Second classic trap: the part number says F1, the product is F3. |
| M365_F1 | Microsoft 365 F1 | The actual F1: no mailbox rights, Teams and web SharePoint only. |
| IDENTITY_THREAT_PROTECTION | Microsoft 365 E5 Security | Add-on that upgrades E3 with the E5 security stack (Defender suite, Entra ID P2). |
| INFORMATION_PROTECTION_COMPLIANCE | Microsoft 365 E5 Compliance | Add-on that upgrades E3 with the E5 compliance stack. |
| DEVELOPERPACK_E5 | Microsoft 365 E5 Developer | Developer programme tenant licence; spotting it identifies a dev tenant. |
| Microsoft_365_Copilot | Microsoft 365 Copilot | Per-user add-on; requires an eligible base licence. |
| Exchange Online standalone | ||
| EXCHANGESTANDARD | Exchange Online (Plan 1) | 50 GB mailbox. The usual mailbox-only licence. |
| EXCHANGEENTERPRISE | Exchange Online (Plan 2) | 100 GB mailbox, archiving, voicemail. Needed for auto-expanding archive. |
| EXCHANGEDESKLESS | Exchange Online Kiosk | 2 GB mailbox, OWA only. Common on shared/frontline accounts. |
| EXCHANGEARCHIVE_ADDON | Exchange Online Archiving | Archive add-on for Exchange Online Plan 1 mailboxes. |
| EOP_ENTERPRISE | Exchange Online Protection | Standalone EOP for on-premises mailboxes routed through Microsoft. |
| Entra ID, EMS and security | ||
| AAD_PREMIUM | Microsoft Entra ID P1 | Formerly Azure AD Premium P1. Conditional Access, sign-in logs retention, SSPR writeback. |
| AAD_PREMIUM_P2 | Microsoft Entra ID P2 | Adds PIM, Identity Protection and access reviews. |
| EMS | Enterprise Mobility + Security E3 | Entra ID P1 plus Intune plus AIP P1. |
| EMSPREMIUM | Enterprise Mobility + Security E5 | Entra ID P2 plus Intune plus AIP P2 plus Defender for Identity and Cloud Apps. |
| INTUNE_A | Microsoft Intune Plan 1 | Standalone Intune. |
| RIGHTSMANAGEMENT | Azure Information Protection Premium P1 | Standalone AIP; also included in EMS E3. |
| ATP_ENTERPRISE | Microsoft Defender for Office 365 (Plan 1) | Safe Links and Safe Attachments. Included in Business Premium. |
| THREAT_INTELLIGENCE | Microsoft Defender for Office 365 (Plan 2) | Adds automated investigation, attack simulation, Threat Explorer. Included in E5. |
| DEFENDER_ENDPOINT_P1 | Microsoft Defender for Endpoint Plan 1 | Included in M365 E3. |
| WIN_DEF_ATP | Microsoft Defender for Endpoint Plan 2 | The full EDR product. Included in M365 E5 and E5 Security. |
| ADALLOM_STANDALONE | Microsoft Defender for Cloud Apps | Formerly Cloud App Security; Adallom was the acquired company. |
| Teams and voice | ||
| MCOMEETADV | Microsoft Teams Audio Conferencing | Dial-in numbers for meetings. Included in E5. |
| MCOEV | Microsoft Teams Phone Standard | Phone System: makes a user PSTN-capable, but needs a calling plan or operator connect for actual numbers. |
| MCOPSTN1 | Teams Domestic Calling Plan | Minutes bundle on top of Teams Phone. |
| MCOPSTN2 | Teams Domestic and International Calling Plan | |
| MCOPSTNC | Communications Credits | Pay-as-you-go top-up for dial-out and toll-free. |
| PHONESYSTEM_VIRTUALUSER | Teams Phone Resource Account | Free licence for auto attendants and call queues. Every AA/CQ number needs one. |
| MCOCAP | Microsoft Teams Shared Devices | Formerly Common Area Phone licence. |
| MEETING_ROOM | Microsoft Teams Rooms Standard | Legacy room licence, replaced by Teams Rooms Pro and Basic. |
| TEAMS_EXPLORATORY | Microsoft Teams Exploratory | Self-service trial users started themselves. Shows up uninvited in licence reports; mostly noise. |
| Power Platform | ||
| POWER_BI_STANDARD | Power BI (free) | The free tier. Often self-service signup noise like Teams Exploratory. |
| POWER_BI_PRO | Power BI Pro | Required to share reports. Included in E5. |
| PBI_PREMIUM_PER_USER | Power BI Premium Per User | |
| FLOW_FREE | Power Automate Free | Self-service signup noise; appears on huge numbers of accounts. |
| FLOW_PER_USER | Power Automate Premium (per user) | |
| POWERAPPS_PER_USER | Power Apps Premium (per user) | |
| POWERAPPS_VIRAL | Power Apps Plan 2 Trial | Viral self-service trial. Harmless but clutters reports in nearly every tenant. |
| Project and Visio | ||
| PROJECT_P1 | Project Plan 1 | Web-based Project only. |
| PROJECTPROFESSIONAL | Project Plan 3 | Includes the Project desktop client. |
| PROJECTPREMIUM | Project Plan 5 | Portfolio management tier. |
| VISIOONLINE_PLAN1 | Visio Plan 1 | Web Visio only. |
| VISIOCLIENT | Visio Plan 2 | Includes the Visio desktop client. |
| Windows and other | ||
| WIN10_PRO_ENT_SUB | Windows 10/11 Enterprise E3 | Per-user Windows Enterprise upgrade rights. |
| WIN10_VDA_E3 | Windows 10/11 Enterprise E3 VDA | Virtual desktop access variant. |
| WIN10_VDA_E5 | Windows 10/11 Enterprise E5 | Adds Defender for Endpoint P2. |
| SHAREPOINTSTANDARD | SharePoint Online (Plan 1) | |
| SHAREPOINTENTERPRISE | SharePoint Online (Plan 2) | |
| SHAREPOINTSTORAGE | Office 365 Extra File Storage | Per-GB SharePoint storage add-on. |
| WINDOWS_STORE | Windows Store for Business | Retired service; the licence object lingers in older tenants. |
This table covers names. The matching SkuId GUIDs are global constants, but the reliable way to get them is from the tenant itself rather than from a webpage:
Connect-MgGraph -Scopes "Organization.Read.All" -NoWelcome
Get-MgSubscribedSku | Select-Object SkuPartNumber, SkuId, ConsumedUnits, @{n='Total';e={$_.PrepaidUnits.Enabled}} | Sort-Object SkuPartNumber
That returns every SKU the tenant owns with its GUID and consumption, which is all that licence assignment needs. To see what a specific user holds:
Get-MgUserLicenseDetail -UserId user@contoso.com | Select-Object SkuPartNumber, SkuId
For assignment, removal, finding every user on a given SKU and listing unlicensed accounts, the Entra ID builder has ready-made commands in its Licensing category, each with the Graph scopes it needs.
When a tenant review turns up a wall of part numbers, three patterns are worth recognising on sight. Self-service noise: FLOW_FREE, POWER_BI_STANDARD, POWERAPPS_VIRAL and TEAMS_EXPLORATORY are free or trial licences users granted themselves; they cost nothing but bloat reports. Renamed products: anything with PREMIUM or F1 in the part number deserves a second look against this table before you tell a customer what they own. And suite overlap: a user holding both ENTERPRISEPACK and EXCHANGESTANDARD is double-licensed for their mailbox, which is reclaimable spend; the same goes for standalone Intune or Entra ID P1 alongside an EMS or Microsoft 365 suite.