🎯 The business: you are the part-time IT admin for small offices that run on Microsoft 365 or Google Workspace and have no IT person. You set up accounts and email, turn on multifactor sign-in, clean up who can see which files, and get Copilot or Gemini ready so the AI does not show staff things they should not see. You sell a paid health check first, then a monthly admin plan priced per user.
At a glance
| Money to start | ≈ $560 to $2,290 |
| Time to the first paid client | 3 to 8 weeks |
| Hours a week | 8 to 15 part time; 25 to 35 with a full client list |
| Skills that matter most | Accounts and sign-in security, email settings, file sharing permissions, explaining changes to non-technical staff |
| What it can pay | About $3,600 a month before tax with eight offices on a plan and one project a month (worked below) |
Is this for you?
It suits someone careful and organized who likes setting things up properly and writing down what they did. If you have run the accounts for a club, a family business or your own small office and enjoyed it, this is that job, paid.
It is a poor fit if you want to avoid phone calls from worried people. When email stops working, the client wants you that hour. You also need to be comfortable saying "no, I won’t give everyone admin rights" to the person paying you.
Who pays, and what
Offices of 3 to 30 people with no IT staff: law and accounting firms, insurance agencies, clinics, real estate offices, nonprofits and contractors. Usually the office manager has become the accidental IT person, and the owner knows it is not working.
Three things push them to pay now. First, AI: Microsoft sells Copilot Business as an add-on (resellers list it at about $21 a user a month for firms up to 300 users; check Microsoft’s current price), and Google now includes Gemini in every Workspace Business plan. Both AI tools answer from the files a user can already open, so loose sharing settings become a real leak. Second, fraud: the FBI’s 2025 Internet Crime Report counted 24,768 business email compromise complaints with $3.05 billion in losses, and most of these start with a stolen or spoofed mailbox. Third, cyber insurance applications now commonly ask whether multifactor sign-in is on for every email account.
The setup gap is real: in the Census Bureau’s study of AI users, 64% had changed nothing about how they work, and in Bluevine’s 2026 owner survey data security and privacy was the top barrier to AI (33%).
What they pay: light admin plans run about $15 to $40 a user a month, or $75 to $150 an hour for project work (research estimates from MSP price guides). Their own licenses are separate. Microsoft’s list prices since July 1, 2026, as reported by resellers, are $7 (Business Basic), $14 (Business Standard) and $22 (Business Premium) a user a month. Google lists Workspace Business Starter at $7, Standard at $14 and Plus at $22 on annual plans.
What it takes to start
| LLC and city or county license | $150 to $500 |
| Your own Microsoft 365 Business Premium tenant, one user, one year | About $264 |
| A Google Workspace practice domain on Business Starter, one user, one year | About $84 |
| One paid AI account (optional) | $0 to $240 |
| Errors and omissions plus cyber liability insurance (an estimate; get quotes) | $0 to $1,000 first payment |
| Domain, simple website, password manager | $60 to $200 |
| All-in | ≈ $560 to $2,290 |
Run your own business on the same tools you sell. Every setting you recommend should be one you have turned on in your own tenant first. Clients buy their own licenses in their own name; if you later resell licenses, that is a separate step covered below.
Start to finish: the steps
1. Learn one platform deeply. Pick Microsoft 365 if local offices around you mostly run Outlook and Word, Google Workspace if they run Gmail. Microsoft Learn and Google’s Workspace admin training are free. Practice in your own tenant: create users, turn on multifactor sign-in, set up a shared mailbox, restrict external sharing, remove a departing user properly.
2. Learn the email trust settings. SPF, DKIM and DMARC tell other mail servers which senders are really you. Many small offices have none of them, which helps fraudsters spoof the owner and hurts delivery of real mail. This is quick, valuable work, and a good first paid fix.
3. Make the business legal. Register an LLC or start as a sole proprietor, get the local license, open a business bank account, and price errors and omissions plus cyber liability insurance. You will hold admin rights to other people’s email, so the insurance matters. See Business insurance.
4. Write your health review. Turn the eight checks above into a two-hour review with a one-page report. Charge for it and credit the fee toward the fixes. Get written permission and a separate admin account for yourself before you log in.
5. Fix the dangerous things first. Multifactor sign-in for everyone, separate admin accounts, removal of former staff, and email trust settings. Tell staff a week ahead and sit with them the morning it goes live; a lockout on day one costs you the client’s trust.
6. Get the office ready for AI. Before anyone turns on Copilot or Gemini widely, find folders shared with "everyone" or "anyone with the link", lock down HR, payroll and client files, and pilot the AI with three people for two weeks. Write a one-page AI use policy with the owner: what may go into prompts and what may not.
7. Sell the monthly admin plan. New hires, departures, password resets, shared mailboxes, sharing reviews, and a monthly check of sign-in alerts. Price per user with a minimum, and list what is not included.
8. Decide whether to resell licenses. Reselling Microsoft licenses means joining the Microsoft AI Cloud Partner Program and enrolling in the Cloud Solution Provider (CSP) program as an indirect reseller through a distributor. Microsoft’s current rules ask indirect resellers for at least $1,000 of CSP revenue in the prior 12 months, multifactor sign-in on all admin accounts, a named security contact and acceptance of the partner agreement. CSP partners can use Microsoft 365 Lighthouse to manage many small tenants from one screen. Google’s partner program was renamed Google Cloud Partner Network in 2026; check its current Workspace reseller terms. Many solo admins never resell and simply manage the client’s own subscription.
9. Grow into the next service. Clients will ask about backups, phishing training and full managed IT, all separate ideas in this section. Add one when two clients ask.
Pricing
| Paid health review, credited to the fixes | $350 to $600 |
| New office setup or move to Microsoft 365 or Workspace | $100 to $200 a user, $1,000 minimum |
| Copilot or Gemini readiness (sharing cleanup, AI policy, three-person pilot) | $1,500 to $4,000 |
| Monthly admin plan | $15 to $40 a user, $150 minimum |
| Work outside the plan | $75 to $150 an hour |
These are example prices for a U.S. operator selling locally. A minimum monthly fee matters: a four-person office at $25 a user is $100, which does not cover the time one bad Monday takes. Do not promise that your setup makes an office "secure" or "compliant"; promise the specific settings you turn on and the checks you run. More in Pricing AI and IT services.
The math
Take a solo admin about a year in. Eight offices averaging 12 users is 96 users on a $25 plan: $2,400 a month. One setup or AI readiness project a month averages $1,500, for $3,900 in all. Costs: about $80 for your own tenants and tools, $100 set aside for insurance, $20 for AI, and $100 for marketing, $300 in all. That leaves about $3,600 a month before tax for roughly 25 hours a week, including sales.
The first months are slower: expect two or three health reviews and one small project while you build references. Set aside about a quarter to a third of profit for income and self-employment tax. See Small business taxes.
Getting customers
Who to approach first. Offices that already trust you: a family business, a former employer, your own accountant, insurance agent or dentist. Then the people who see messy offices every week: bookkeepers, copier and phone system vendors, and web designers. Ask each for one introduction to an office with no IT person.
The first ten customers. List 60 offices with 3 to 30 staff within 20 miles: law, accounting, insurance, clinics, nonprofits. Send 40 short personal emails, make 15 follow-up calls, and give one 20-minute talk at the chamber of commerce called "Is your email ready for Copilot?" As an example of what that effort can bring over about 90 days: 6 to 8 conversations, 3 or 4 paid health reviews, and 2 or 3 monthly plans. Repeat the cycle with what you learned.
Hi Dana, I set up and look after Microsoft 365 for small offices around Springfield that don’t have an IT person. Many offices I check are missing a basic protection or two, like multifactor sign-in on every mailbox or the email settings that stop someone from faking your address. Before anyone in your office turns on Copilot, it is also worth checking who can see the HR and client folders. I do a two-hour review for $400 and you get a one-page list of what is fine, what isn’t, and what each fix would cost. The fee comes off any work you decide to do. Would a 15-minute call next week be useful?
Channels, best to worst for this customer.
1. Referral partners (bookkeepers, accountants, IT firms that turn away tiny offices): they already hold the trust.
2. Chamber of commerce and BNI-style groups: a short talk beats any ad.
3. Trade associations: a state bar small-firm section or CPA society event reaches many offices at once.
4. Google Business Profile with real reviews: offices search "IT support near me" when something breaks.
5. LinkedIn: short posts with one checklist item each, aimed at local owners and office managers.
6. Upwork and Fiverr: fine for remote one-off tasks and a portfolio, but rates are global and clients rarely stay.
7. Paid search ads: last; "IT support" clicks are expensive.
Case studies and referrals. Score each client’s health review again at 90 days and, with permission, write a short before and after: "3 of 8 checks passed, now 8 of 8; no lockouts during rollout." Ask for one introduction at that review. If you thank referrers with a free month, that is fine, but never pay for reviews or ask only happy clients to post them; the FTC’s review rule bans that. More in Launch and marketing playbook.
Running it week to week
Monday: read each tenant’s sign-in and security alerts, and check for accounts without multifactor sign-in. During the week: handle new hires and departures the same day you hear about them. Monthly: review external sharing and admin roles, check license counts against real staff, and send each client a short note of what you did. Keep a log per client of every change, with dates. Review Microsoft’s and Google’s admin change notices weekly; features and defaults change often, especially for AI.
Rules to check
No license is needed to administer software for a client. The rules are about access and data. Use a written agreement that says what you may change, that the client keeps ownership of the tenant and an emergency admin account, how fast you respond, and what happens to your access when the work ends. If a client handles health records, you are a HIPAA business associate: sign a business associate agreement, and confirm the client’s Microsoft or Google plan is covered by the vendor’s own agreement (consumer accounts are not). Tax preparers and many accounting firms fall under the FTC Safeguards Rule, which requires multifactor sign-in for anyone accessing their systems and notice to the FTC within 30 days of a breach involving 500 or more people. Every state has a data breach notification law, and a mistake in your hands can trigger one for your client. Never give legal or compliance opinions; tell clients which settings you turned on and let their lawyer or compliance adviser say whether that meets a rule. If you resell Microsoft licenses, follow the CSP program rules above. See Contracts, client data and AI rules.
What goes wrong
You turn on multifactor sign-in on a Friday and the owner is locked out on a trip; roll out on a weekday with people at their desks. You are the only admin and you get sick; keep a sealed emergency account the client controls. A former employee still has access months later because nobody told you; make departures part of the client’s own checklist. The office turns on Copilot itself before your cleanup and someone finds the payroll file; tell clients in writing to wait. And a client on a $100 plan calls daily; set a minimum fee and a clear scope from the start.
Questions people ask
How much does Microsoft 365 admin support cost for a small business?
As research estimates, light admin plans run about $15 to $40 a user a month, and project work $75 to $150 an hour, on top of the client’s own licenses. Full managed IT, which includes devices and security tools, costs much more.
Do I need a certification to manage Microsoft 365 for clients?
No license or certificate is required. Microsoft’s administrator certifications help with credibility, and Microsoft Learn’s training is free. Check the current exam fee before you book.
Is Copilot or Gemini safe to turn on for a small office?
They show each user only what that user can already open. If files are shared too widely, the AI makes that easy to find. Review sharing on sensitive folders, write a short AI use policy, and pilot with a few people first.
How do I become a Microsoft 365 reseller?
Join the Microsoft AI Cloud Partner Program and enroll in the Cloud Solution Provider program as an indirect reseller through a Microsoft distributor. Current rules include at least $1,000 of CSP revenue a year and multifactor sign-in on admin accounts. Reselling is optional.
Can a college student do this part time?
Yes for setup projects and remote admin, if you can answer urgent problems during business hours or have a backup. International students on F-1 visas generally cannot freelance for outside clients without work authorization; check with your school’s international student office first. More in For students.
Free help
Microsoft Learn and Google’s Workspace admin help center have free admin training and setup guides. CISA’s Cyber Guidance for Small Businesses gives a short list of priorities (multifactor sign-in, tested backups, staff training, updates) that you can use as your health-review backbone. SCORE mentors and Small Business Development Centers help with pricing and contracts at no cost.
Checked in November 2026: Google Workspace prices on Google’s page, Microsoft’s CSP indirect reseller rules and Lighthouse requirements on Microsoft Learn, FBI 2025 business email compromise figures, and the FTC Safeguards Rule text. Microsoft 365 and Copilot Business prices come from resellers, not Microsoft’s page; re-check them, and Google’s partner program terms, before you quote.