← Microsoft 365 audit scope

Licensing & Cost Optimisation

7 checks · 2 sub-categories

Licensing decides which controls you're even allowed to use — and most tenants sit in one of two states: paying for Business Premium or E5 features that were never enabled, or being quietly blocked from a recommended control by a licence nobody realised was required. Either way, you should know before you're told to 'just fix it'.

Security features versus licences held

  • Licensed-but-unused security capability

    Conditional Access, Intune, Defender for Office 365, DLP and sensitivity labels included in your current subscription but switched off.

  • Controls blocked by current licensing

    Each recommendation in your report notes the minimum licence required, so nothing lands as an unpriced surprise.

  • Entra ID P1 / P2 feature gap

    Which identity controls (risk-based Conditional Access, PIM, access reviews) your current tier does and doesn't allow.

Spend hygiene

  • Licences assigned to inactive accounts

    Cross-references the inactive account list against paid assignments — this often covers the cost of the audit outright.

  • Duplicate or overlapping licences

    Users holding two SKUs that provide the same capability.

  • Unassigned purchased licences

    Seats being billed each month with nobody attached to them.

  • Right-sizing based on real app usage

    Actual Outlook, Teams, SharePoint and OneDrive usage per user, so downgrades are based on evidence rather than guesswork.

Want to know where you actually stand?

Every one of these checks is run as part of a single point-in-time audit, delivered as a plain-English, risk-prioritised report.