Office 365 Government
Important
Microsoft Teams is experiencing a tremendous spike in online calls and audio/video conferencing due to the coronavirus (COVID-19) pandemic.
In response to the unprecedented increase in calls, and to ensure continuity and availability, Microsoft is allowing Microsoft Teams GCC audio/video servers to leverage processing capacity in our commercial datacenters, as well as in our government datacenters.
These audio/video servers reside within the Microsoft Azure FedRAMP High accreditation boundary servers in the United States and do not store any customer content. However, these servers are processing audio and video for calls and conferences and are operating under our commercial staff during this interim period.
Qualified, screened personnel are monitoring these servers for potential access to customer data by reviewing any interactive log-ons to these servers. Qualified personnel meet GCC requirements for access to customer content. For details about screening requirements, see the GCC service description.
Thank you for your support as we take steps to ensure that our services remain available and reliable in these extraordinary times.
In response to the unique and evolving requirements of the United States public sector, Microsoft has created Office 365 Government plans (or Office 365 Government). This service description provides an overview of features that are specific to Office 365 Government US environments. We recommend that you read this service description alongside other Microsoft 365 and Office 365 service descriptions.
How to use this service description
The Office 365 Government service description is designed to serve as an overlay to the general Office 365 service description. It defines the unique commitments and differences compared to Office 365 Enterprise offerings.
About Office 365 Government environments
Office 365 Government plans are monthly subscriptions and can be licensed to an unlimited number of users.
The Office 365 GCC environment provides compliance with federal requirements for cloud services, including FedRAMP High, Defense Federal Acquisition Regulations Supplement (DFARS), and requirements for criminal justice and federal tax information systems (CJI and FTI data types).
The Office 365 GCC High and DoD environments deliver compliance with Department of Defense Security Requirements Guidelines, Defense Federal Acquisition Regulations Supplement (DFARS), and International Traffic in Arms Regulations (ITAR).
In addition to the features and capabilities of Office 365, the organizations that use Office 365 Government benefit from the following features unique to Office 365 Government:
Your organization's customer content is logically segregated from customer content in Microsoft's commercial Office 365 Services.
Your organization's customer content is stored within the United States.
Access to your organization's customer content is restricted to screened Microsoft personnel.
Office 365 Government complies with certifications and accreditations that are required for US Public Sector customers.
Customer eligibility
Office 365 Government is available to (1) US federal, state, local, tribal, and territorial government entities, and (2) other entities that handle data that is subject to government regulations and requirements and where use of Office 365 Government is appropriate to meet these requirements, subject to validation of eligibility. Validation of eligibility by Microsoft will include confirmation of handling data subject to International Traffic in Arms Regulations (ITAR), law enforcement data subject to the FBI's Criminal Justice Information Services (CJIS) Policy, or other government-regulated or controlled data. Validation may require proof of registration with the U.S. Department of State for ITAR data or sponsorship by a government entity with specific requirements for the handling of data. The Office 365 DoD environment is for the exclusive use of the United States Department of Defense.
While eligibility criteria are consistent across Office 365 Government offerings, Microsoft will only agree to ITAR contract language for the GCC High environment.
Entities with questions about eligibility for Office 365 Government should consult their account team.
Upon renewal of a customer's contract for Office 365 Government, revalidation of eligibility is required.
Customer content located within the United States
Office 365 Government services are provided from datacenters physically located in the United States. Customer content is stored at rest in datacenters physically located only in the U.S.A. This includes but isn't limited to:
- Exchange Online mailbox content (email bodies, calendar entries, and the content of e-mail attachments)
- SharePoint Online site content and the files stored within that site
- Microsoft Teams persistent chat threads
- Skype for Business archived conversations, uploaded documents, and whiteboarding sessions
- Microsoft Planner plans
- Forms data
- PowerApps/PowerAutomate data
Office 365 Government and third-party services
Office 365 provides the ability to integrate third-party applications into SharePoint Online sites, Teams, Office applications included in Microsoft 365 Apps for enterprise (such as Word, Excel, PowerPoint, and Outlook), and Outlook Web App. In addition, Office 365 supports integration with third-party service providers. These third-party applications and services might involve storing, transmitting, and processing your organization's customer data on third-party systems that are outside of the Office 365 infrastructure and therefore aren't covered by the Office 365 compliance and data protection commitments. It's recommended that you review the privacy and compliance statements provided by the third parties when assessing the appropriate use of these services for your organization.
Restricted data access by administrators
Access to Office 365 Government customer content by Microsoft administrators is restricted to screened personnel. For personnel screening details, refer to the service description page for each respective environment (GCC or GCC High and DoD).
FastTrack Center onboarding assistance
With the FastTrack Center Benefit for Office 3651, you work remotely with FastTrack Specialists to get your Office 365 environment ready for use and plan rollout and usage within your organization. The FastTrack process provides onboarding and user adoption services.
Onboarding consists of:
Core onboarding - These are tasks required for tenant configuration and integration with Microsoft Entra ID if needed. Core onboarding also provides the baseline for onboarding other eligible services.
Service onboarding and migration - Service onboarding tasks enable scenarios in your tenant. Data migration (including email and files) is covered in Data Migration.2
User adoption services are composed of tasks that provide guidance for you to ensure your users are aware of the eligible services and can use them to drive business value. This assistance occurs in parallel to onboarding activities.
Specific information on the FastTrack Center process can be found here. For a breakdown of engagement roles and responsibilities, review FastTrack Responsibilities as well as Your Responsibilities.
1 You must purchase at least 150 licenses from the list of the eligible plans to receive FastTrack services.
2 Data Migration services are available to Office 365 tenants with 500 or more licenses.
Data migrations performed by FastTrack
Customers who choose the FastTrack migration benefit will need to grant access to the team managing their data migrations. These personnel are US citizens and undergo the following background checks before performing migrations for customers of Office 365 US Government services.
Background screening | GCC | GCC High and DoD |
---|---|---|
Verification of US citizenship | Yes | Yes |
Employment history check | Yes | Yes |
Education verification | Yes | Yes |
Social Security number (SSN) search | Yes | Yes |
Criminal history check (7 year) | Yes | Yes |
Office 365 US Government and Azure Government ExpressRoute
Office 365 US Government customers can use Azure Government ExpressRoute services to connect privately to supported Office 365 services instead of connecting over the public internet.
For details, such as supported providers, pricing models, and more, review the Azure ExpressRoute information.
For details on Office 365 support for Azure ExpressRoute, see Azure ExpressRoute for Office 365.
System requirements
For system requirements for Office 365 US Government plans, see System requirements for Office on the office.com products site.
Microsoft Defender portal and Microsoft Purview compliance portal
For more information, links, availability, and information about the Microsoft Defender portal and the Microsoft Purview compliance portal, see Microsoft 365 Guidance for security & compliance.
Service availability for each plan
Each Office 365 plan includes a number of individual services, such as Exchange Online and SharePoint Online. The following table shows the services that are available in each Office 365 US Government plan.
Office 365 service | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
---|---|---|---|---|
Microsoft 365 for the web | Yes | Yes | Yes | Yes |
Microsoft 365 Apps for enterprise | No | Yes | Yes | No |
Exchange Online | Yes | Yes | Yes | Yes |
Exchange Online Protection | Yes | Yes | Yes | Yes |
SharePoint Online | Yes | Yes | Yes | Yes |
OneDrive for Business | Yes | Yes | Yes | Yes |
Skype for Business (Instant Messaging & Presence) | Yes | Yes | Yes | Yes |
Power BI Pro | No1 | No1 | Yes | No1 |
Project Online | No1 | No1 | No1 | No1 |
Voice - Phone System, Audio Conferencing | No1 | No1 | Yes3 | No |
Visio for the web | No4 | No4 | No4 | No4 |
Viva Engage2 | No2 | No2 | No2 | No2 |
1 Not included but can be purchased as a separate add-on. Project Online includes Project Online Desktop Client as a part of the subscription.
2 Viva Engage Enterprise is not a component of Office 365 US Government, but may be acquired at no cost as a standalone offer for each user licensed for Office 365 in GCC. This offer is currently limited to customers that purchase Office 365 GCC under Enterprise Agreements and Enterprise Subscription Agreements. Viva Engage is not available in GCC High or DoD.
3 Calling Plan is an add-on (add language or bring your own trunk).
4 Not included but can be purchased as a separate add-on. Visio for the web includes the Visio desktop app as a part of the subscription.
Platform features
The following table lists the platform features and services that are available across the Office 365 US Government plans.
Feature | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
---|---|---|---|---|
Office 365 administration | ||||
Use the Microsoft 365 admin center to administer Office 365 | Yes13 | Yes13 | Yes | Yes13 |
Manage core service settings from Office 365 | Yes | Yes | Yes | Yes |
Use Windows PowerShell to manage Office 365 | Yes | Yes | Yes | Yes |
Protect content by using Azure Information Protection | No1 | Yes12 | Yes12 | Yes12 |
Office 365 suite features | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Microsoft Bookings | No | Yes18 | Yes18 | No |
Microsoft Power Automate | Yes | Yes | Yes | Yes |
Microsoft Forms | Yes | Yes | Yes |
Yes |
Microsoft Graph API | Yes | Yes | Yes | Yes |
Microsoft Viva Insights | Yes14 | Yes14 | Yes14 | No |
Microsoft Viva Connections | Yes24 | Yes24 | Yes24 | Yes24 |
Microsoft Planner | Yes | Yes | Yes | Yes |
Microsoft PowerApps | Yes | Yes | Yes | Yes |
Shifts for Teams (replaces Microsoft StaffHub)23 | Yes | Yes | Yes | Yes |
Microsoft Stream (Classic) | Yes16, 21 | Yes16, 21 | Yes16, 21 | Yes16, 17, 21 |
Microsoft Stream (on SharePoint) | Yes22 | Yes22 | Yes22 | Yes22 |
Microsoft Sway | No | No | No | No |
Microsoft Teams | Yes | Yes | Yes | Yes |
Office Delve | Yes14 | Yes14 | Yes14 | Yes14 |
Office 365 Groups | Yes | Yes | Yes | Yes |
User account management | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Cloud identity, Federated identity, or Multi-factor authentication | Yes | Yes | Yes | Yes |
Office 365 desktop setup | Yes | Yes | Yes | Yes |
Manage users with Office 365 | Yes | Yes | Yes | Yes |
Bulk upload using .csv files | Yes7 | Yes7 | Yes7 | Yes7 |
Directory Sync tool | Yes | Yes | Yes | Yes |
Exchange simple (cutover) migration | Yes | Yes | Yes | Yes |
Delete accounts and reset user passwords from Microsoft 365 or by using Windows PowerShell3 | Yes | Yes | Yes | Yes |
Users can change their own password4 | Yes | Yes | Yes | Yes |
Manage licenses | Yes5, 6 | Yes5, 6 | Yes5, 6 | Yes5, 6 |
Manage security groups from Office 365 | Yes | Yes | Yes | Yes |
Multiple administrator roles available | Yes | Yes | Yes | Yes |
Allow a partner to administer Office 365 for you | Yes9 | Yes9 | Yes9 | Yes9 |
Microsoft Entra services | Yes | Yes | Yes | Yes |
Domains | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Add custom 2nd-level domains, like fourthcoffee.com | Yes | Yes | Yes | Yes |
Add custom 3rd-level domains, like marketing.fourthcoffee.com | Yes | Yes | Yes | Yes |
Add up to 900 custom domains | Yes | Yes | Yes | Yes |
Domain ownership verification required for custom domains | Yes | Yes | Yes | Yes |
Service health and continuity | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Status information available on the Service health or Service status page | Yes | Yes | Yes | Yes |
Status of individual alerts available on the Microsoft 365 admin center dashboard | Yes | Yes | Yes | Yes |
Service health RSS feed | Yes | Yes | Yes | Yes |
Reports | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Activity reports | Yes | Yes | Yes | Yes |
Microsoft Graph Usage Reports APIs | Yes | Yes | Yes | Yes |
Microsoft Graph API (BETA) | Yes | Yes | Yes | Yes |
Service updates | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Regular updates provided to all customers | Yes | Yes | Yes | Yes |
Notifications sent to Message Center when action is required | Yes14 | Yes14 | Yes14 | Yes14 |
Roadmap.office.com for some service updates | No10, 12 | No10, 12 | No10, 12 | No10, 12 |
Option to turn on Targeted Release | Yes8 | Yes8 | Yes8 | Yes8 |
Help and training | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Online help | Yes | Yes | Yes | Yes |
Community | Yes | Yes | Yes | Yes |
Other self-help resources | Yes | Yes | Yes | Yes |
Self-paced training | Yes | Yes | Yes | Yes |
Networking | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
IPv4 and IPv6 protocols | Yes | Yes | Yes | Yes |
Trust | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Privacy, security, and transparency | ||||
Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security) | No10, 16 | No10, 16 | Yes16 | No10, 16 |
Microsoft Defender for Office 365 | No10, 15 | No10, 15 | Yes15 | No10, 15 |
Microsoft Purview Customer Lockbox | No10 | No10 | Yes | No10 |
Microsoft Purview Customer Key19 | No | No | Yes | No |
Microsoft Purview eDiscovery (Premium) | No10 | No10 | Yes | No10 |
Microsoft Purview eDiscovery (Standard) | No10 | No10 | Yes | No10 |
Microsoft Purview Audit (Standard)20 | Yes | Yes | Yes | Yes |
Microsoft Purview Audit (Premium)20 | No | No | Yes | No |
Microsoft Secure Score11 | Yes7, 12 | Yes7, 12 | Yes7, 12 | Yes7, 12 |
Threat Intelligence | No10 | No10 | Yes | No10 |
Compliance | ||||
SAS 70 / SSAE16 Assessments | Yes | Yes | Yes | Yes |
ISO 27001 certified | Yes | Yes | Yes | Yes |
EU Model Clauses | Yes | Yes | Yes | Yes |
EU Safe Harbor | Yes | Yes | Yes | Yes |
HIPAA-Business Associate Agreement | Yes | Yes | Yes | Yes |
FISMA Authority to Operate | Yes | Yes | Yes | Yes |
Microsoft Data Processing Agreement | Yes | Yes | Yes | Yes |
PCI DSS Level One | Yes | Yes | Yes | Yes |
PCI-governed PAN data | No | No | No | No |
BlackBerry | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
Use BlackBerry Internet Service (BIS) | No2 | No2 | No2 | No2 |
Partners | ||||
Create trial invitations and purchase orders for a customer who is using the specified plan | No9 | No9 | No9 | No9 |
Provide delegated administration | No9 | No9 | No9 | No9 |
Service Level Agreement | Yes | Yes | Yes | Yes |
Product use rights | Yes | Yes | Yes | Yes |
1 Azure Information Protection is not included but can be purchased as a separate add-on and will enable the supported Information Rights Management (IRM) features. Some Azure Information Protection features require a subscription to Microsoft 365 Apps for enterprise, which is not included with Office 365 Government G1.
2 Existing BBCS and BIS customers can continue use of the service. New customers are not being accepted.
3 If using directory synchronization, you must delete accounts or change passwords by using Active Directory, rather than the Office 365 portal or by using the Microsoft Entra module for Windows PowerShell.
4 To learn how to set self-service password management policies for users, see Reset your work or school password using security info.
5 Reducing seats that were purchased with a term discount may be subject to an early termination fee. This is not applicable to subscriptions paid on a monthly basis.
6 The following plans do not support license seat changes from the Microsoft 365 admin center: Office 365 Government G1, Office 365 Government G3, Office 365 Government F3.
7 Not yet available in GCC High, but coming soon.
8 For Office 365 Government G1, G3, and F3, Office 365 for business roadmap apply; however, there may be some differences or delays for specific service updates due to compliance requirements.
9 Not yet available in Office 365 Government offerings, but coming soon.
10 Not included, but can be purchased as a separate add-on in GCC.
11 Available at https://securescore.office.com. Requires admin permissions. For more information, see Microsoft Secure Score.
12 Not yet available in DoD environment, but coming soon.
13 Admin center does not include usage analytics in DoD or GCC High environments.
14 Viva Insights for personal insights is available in GCC, GCC High (excluding Headspace) and DoD (excluding Headspace and Praise). The Viva Insights Outlook add-in and inline suggestions are not available in GCC High and DoD. The Viva Insights subscription is available in GCC but not in GCC High and DoD.
15 Anti-phishing for user and domain impersonation and spoof intelligence are not yet available in GCC High and DoD.
16 Not yet available in GCC environment but coming soon.
17 Consumption only for Microsoft Stream: no publishing or sharing.
18 Not available for the Microsoft Graph API or Microsoft Teams.
19 For more information, see Service encryption with Customer Key.
20 Audit in Microsoft 365 provides organizations with visibility into many types of audited activities across different services in Microsoft 365. Use the Security & Compliance Portal audit log search to view user and administrator activity in your organization. You can also use the Office 365 Management Activity API to retrieve events from the unified audit log. When an audited activity is performed by a user or admin, an audit record is generated and stored in the audit log for the customer organization. The length of time that an audit record is retained (and searchable in the audit log) depends on the customer's Office 365 or Microsoft 365 Enterprise subscription and the type of license assigned to specific users.
21 Stream (classic) will eventually be replaced with Stream (on SharePoint).
22 Stream (on SharePoint) is used to upload your videos to SharePoint, OneDrive and Teams. This is already supported in all Government offerings. Additional enhancements like the Stream start page in Office, closed captions, transcripts, etc are on the Microsoft 365 Roadmap.
23 Shifts for Teams is available in all Enterprise SKUs where Teams is available. Shifts is available in GCC environments, but not in GCC High or DoD environments.
24 Viva Connections is available in G3/G5 (and in G1/F3 with an add-on) on mobile and tablet devices in GCC, GCC High and DoD environments with the exception of Announcements and Analytics features.
Office application availability and enterprise value
The following table shows the Office application features that are available across Office 365 US Government plans.
Application/feature | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
---|---|---|---|---|
Office applications | ||||
Microsoft Word7 | No | Yes | Yes | No |
Microsoft Excel7 | No | Yes | Yes | No |
Microsoft PowerPoint7 | No | Yes | Yes | No |
Microsoft OneNote7 | No | Yes | Yes | No |
Microsoft Outlook7 | No | Yes | Yes | No |
Microsoft Forms7 | Yes | Yes | Yes | No |
Microsoft Whiteboard7 | No | Yes | Yes | No |
Microsoft Publisher | No | Yes | Yes | No |
Microsoft Access | No | Yes | Yes | No |
Skype for Business | Yes3 | Yes | Yes | Yes3 |
Office for Mac for Office 365 | No | Yes | Yes | No |
Office Mobile for iPad/iPhone | Yes | Yes | Yes | Yes |
Office Mobile for Android | Yes | Yes | Yes | Yes |
Office Mobile for Windows Phone | Yes | Yes4 | Yes4 | Yes |
Office Mobile for Windows 10 tablets | Yes | Yes | Yes | Yes |
Outlook for iOS and Android5, 4 | Yes | Yes | Yes | Yes |
Enterprise value | Office 365 Government G1 | Office 365 Government G3 | Office 365 Government G5 | Office 365 Government F3 |
5 installs per user on PC or Mac | No | Yes | Yes | No |
Automated user account provisioning | Yes | Yes | Yes | Yes |
Multilingual user interface | No | Yes | Yes | No |
Client push deployment | No | Yes4 | Yes4 | No |
Client support for on-premises Exchange | No | Yes | Yes | No |
Client support for on-premises SharePoint | No | Yes | Yes | No |
Control of software updates | No | Yes | Yes | No |
Database Compare | No | Yes | Yes | No |
Desktop virtualization | No | Yes | Yes | No |
Excel Spreadsheet Compare | No | Yes | Yes | No |
Excel Spreadsheet Inquire | No | Yes | Yes | No |
Exchange Online and SharePoint Online Archiving and Compliance | No | Yes | Yes | No |
Group Policy support8 | No | Yes | Yes | No |
Cloud Policy support9 | Yes10 | Yes | Yes | Yes11 |
Information Rights Management using Azure Information Protection | No1 | Yes6 | Yes6 | No1 |
Information Rights Management using Windows Server AD RMS | Yes2 | Yes2 | Yes2 | Yes2 |
Office Add-in, ActiveX, and BHO support | No | Yes | Yes | No |
OneNote client access to notebooks on SharePoint Server, SharePoint Online, OneDrive for Business, and Office 365 | No | Yes | Yes | No |
Office Lens | No | No | No | No |
Office Telemetry | No | Yes4 | Yes4 | No |
Offline support for client applications | No | Yes | Yes | No |
Optimized side-by-side client installation | No | Yes | Yes | No |
3D Maps(Power Map for Excel) | No | No | No | No |
Power Pivot for Excel | No | Yes4 | Yes4 | No |
Power Query for Excel | No | Yes4 | Yes4 | No |
Roaming settings | No | Yes | Yes | No |
Shared computer activation | No | Yes | Yes | No |
Support for blocking cloud-based file storage | No | Yes | Yes | No |
Version upgrades | No | Yes4 | Yes4 | No |
Volume activation (KMS/MAK) | No | No | No | No |
1 Azure Information Protection is not included but can be purchased as a separate add-on and will enable the supported Information Rights Management (IRM) features. Some Azure Information Protection features require a subscription to Microsoft 365 Apps for enterprise, which is not included with Office 365 Government G1 or Office 365 Government F3.
2 Windows Server AD RMS is an on-premises server that must be purchased and managed separately to enable the supported IRM features.
3 Skype for Business Basic is available for all customers. The Skype for Business desktop client is a locally installed application that provides presence, instant messaging, and conferencing features for Office 365 plans that include Skype for Business Online. Microsoft 365 Apps for enterprise, and Office 365 Enterprise E3 include the full Skype application, which includes additional features such as advanced telephony support, archiving, and compliance features. A Skype for Business Online license must be assigned for each user. For more information on Lync Basic features, see Skype for Business Online client comparison tables.
4 Not yet available in GCC High or DoD environments, but coming soon.
5 See Using Outlook for iOS and Android in the Government Community Cloud for more details.
6 Not yet available in Office 365 DoD environment, but coming soon.
7 Applications are fully available in the government clouds, with the exception of the specific features not available at this time. See Office application feature availability for details.
8 Group Policy support is only available in the Windows version of Microsoft 365 Apps.
9 Cloud Policy service is not available in GCC High or DoD environments.
10 Limited to policies for web apps.
11 Limited to policies for web apps.
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for