9.2 Microsoft 365 User Portal

Quick Answer: Employees live at office.com / microsoft365.com (and microsoft365.com/apps). They launch assigned apps, install desktop Microsoft 365 Apps when their license includes them, and open My Account to see licenses, devices, and security info. My Apps (myapplications.microsoft.com) is the personal enterprise-app launchpad. None of that is the Microsoft 365 admin center. No Admin tile means no admin role — and that is normal.

The April 30, 2025 outline asks you to describe the capabilities of the Microsoft 365 user portal. The exam’s job is to keep the employee’s home separate from the tenant console you just learned. Same work or school account can sign in to both, but only an administrator sees Admin in the app launcher.

Where the user portal lives

Microsoft has used several public URLs for the same idea: a signed-in Microsoft 365 home for work or school. Today you will hear microsoft365.com, office.com, www.microsoft365.com/apps, and m365.cloud.microsoft. Treat them as the user portal, not as four products. From that home the employee sees recent files, the app launcher (the waffle), and — when the organization allows self-install — Install apps.

This portal is still software as a service. Opening Word in the browser does not turn the tenant into IaaS. It also does not prove the user has a desktop-apps license. Microsoft 365 Apps for the web ship with many plans, including some that never include the full Windows or Mac desktop suite. Chapter 4 already used that split; here the split is where the person clicks.

A work or school account (adele@contoso.com) is what opens this portal for a Microsoft 365 tenant. A personal Microsoft account (outlook.com) opens consumer Microsoft 365 at a different home and has no company admin center. If the stem says Contoso assigned Adele a license, she is on the work portal, not account.microsoft.com consumer billing.

Launch apps — the everyday job

After sign-in, the user portal is a launchpad:

• Microsoft 365 Apps for the web — Word, Excel, PowerPoint, OneNote in the browser.
• Outlook on the web — mail and calendar backed by Exchange Online.
• OneDrive — the user’s work library.
• SharePoint — sites the user can already access.
• Teams, Viva, Stream, Planner, Loop, and other icons the organization (and the user’s license) make available.
• Recent files — documents the account opened, stored in OneDrive or SharePoint.

The user opens what they are already allowed to use. They do not provision a coworker, and they do not grant themselves a Power BI Premium license from this screen. If an icon is missing, the usual causes are “no license,” “admin hid the app,” or “the app is assigned only through My Apps / enterprise applications,” not “the admin center is down.”

Install apps and My Account

Official install documentation for work accounts is the scoring key. The user:

1. Signs in to Microsoft 365 Apps at microsoft365.com/apps (or the equivalent Microsoft 365 home).
2. Chooses Install apps and then Microsoft 365 apps.
3. Lands on My Account, and under Office apps & devices chooses Install Office.
4. Runs the downloaded installer (OfficeSetup.exe on Windows).

Two exam facts hide in that path.

First, the license must already be assigned. Microsoft’s licensing overview says that if the user is not assigned a license, they will not be able to install Microsoft 365 Apps, and admins should assign the license (typically a day ahead) so provisioning can finish. Self-install is not a workaround for “we never bought seats.”

Second, the organization can steer or replace self-install. Admins can set the update channel that self-installing users receive (Settings > Org settings > Microsoft 365 installation options). Many enterprises instead deploy Microsoft 365 Apps with Intune or the Office Deployment Tool so users never need Install apps. Either way, the user portal is still the place a person goes when the company does allow self-service install.

My Account for a work or school account is the employee’s own control panel. Microsoft’s support article on the My Account portal lists the jobs: manage security info, manage devices, change a profile photo, and review how the organization uses the account’s data. From the Microsoft 365 home, Install apps is one doorway into the same account pages that also show subscriptions / licenses assigned to you and apps & devices.

What My Account is not:

• It is not Billing in the admin center. Adele can see her Microsoft 365 Apps for enterprise assignment. She cannot buy 500 more E5 seats or read the company’s invoice.
• It is not Users > Active users. She cannot create a guest, restore a deleted coworker, or assign a license to someone else.
• It is not Message center. Upcoming tenant-wide feature posts are an admin health feature.

Devices on My Account lists work or school devices connected to the account. The user can disable a lost laptop so it should no longer use the account. That is self-service hygiene, not Intune device compliance (Chapter 7).

Security info is often reached at mysignins.microsoft.com/security-info (My Sign-Ins). There the user adds an authenticator app, a phone number, or another method — if the organization allows it. Conditional Access and multifactor authentication policies are admin decisions; the user portal is only where the employee registers the methods those policies demand. Self-service password reset, when enabled, is also an end-user path. “Reset the CEO’s password after a lockout” is still an admin or helpdesk job unless the CEO can complete SSPR themselves.

My Apps is a launchpad, not an admin center

My Apps (historically the My Applications portal, commonly myapplications.microsoft.com or My Apps in Microsoft Entra documentation) shows enterprise applications assigned to the signed-in user: Salesforce, ServiceNow, a custom line-of-business app, or other apps an admin consented and assigned. The user clicks a tile and signs in. That is identity-aware app launching, not tenant administration.

Keep the three “my” surfaces straight:

None of those rows is admin.microsoft.com.

User portal versus admin center — the exam trap

The same person can wear both hats, but the portals do not merge.

If the stem says “the user does not see Admin,” the account is not an administrator. The fix is not “office.com is broken.” The fix is either assign a role (if they truly should administer) or teach them the user portal (if they only need apps).

Consumer Microsoft 365 Personal or Family members manage subscriptions at account.microsoft.com. That is a household Microsoft account, not a Contoso tenant user portal. Do not send a Business Standard user there to install the work desktop apps.

Realistic exam-style scenarios

New laptop. A project manager has Microsoft 365 Apps for enterprise and needs Word on a new Windows device. She signs in at the user portal, chooses Install apps > Microsoft 365 apps, and installs from My Account. She does not need Global Administrator and she should not be sent to the SharePoint admin center.

No Install button. A Business Basic user (web and mobile, no desktop suite) will not get a full Office desktop installer. That is a license outcome, not a broken portal. Point them at Microsoft 365 Apps for the web, or have an admin assign a plan that includes desktop apps.

What license do I have? The employee opens My Account subscriptions. An admin who needs the same answer for all users opens Users or Billing > Licenses in the admin center.

Lost phone. The user opens My Account > Devices or security info, disables the lost device, and adds a new authenticator method if policy allows. Helpdesk gets involved when the user is locked out and cannot complete self-service.

Line-of-business tile. A nurse needs the hospital’s Entra-assigned scheduling app. That tile lives in My Apps, not in Message center and not in Reports > Usage.

Someone asks for the admin URL. If their job is only to work in Word and Teams, give them microsoft365.com, not admin.microsoft.com. If they then say they cannot add a user, they are in the correct portal and they need an admin — or a role assignment.

Exam traps

• User portal ≠ admin center. Launching Outlook on the web is not tenant administration.
• Install apps does not grant a license. The admin assigns the product first; the portal only downloads what the account already owns.
• My Account is personal. It is not company billing and it is not the Users blade.
• My Apps is not usage reporting. It launches assigned enterprise apps.
• No Admin tile is expected for a standard user.
• Consumer account.microsoft.com is the wrong door for a work tenant license.
• Security info is not Conditional Access. Users register methods; admins write the policy.

Official sources

• Install Microsoft 365 apps — Install apps to My Account for work accounts
• Overview of licensing and activation in Microsoft 365 Apps — self-install requires an assigned license
• My Account portal for work or school accounts — security info, devices, profile
• Manage your work or school account connected devices
• Overview of the Microsoft 365 admin center — Admin tile only for administrators
• Study guide for Exam MS-900 — user portal skill