Licensing & Cost Optimisation
7 checks · 2 sub-categories
Licensing decides which controls you're even allowed to use — and most tenants sit in one of two states: paying for Business Premium or E5 features that were never enabled, or being quietly blocked from a recommended control by a licence nobody realised was required. Either way, you should know before you're told to 'just fix it'.
Security features versus licences held
Licensed-but-unused security capability
Conditional Access, Intune, Defender for Office 365, DLP and sensitivity labels included in your current subscription but switched off.
Controls blocked by current licensing
Each recommendation in your report notes the minimum licence required, so nothing lands as an unpriced surprise.
Entra ID P1 / P2 feature gap
Which identity controls (risk-based Conditional Access, PIM, access reviews) your current tier does and doesn't allow.
Spend hygiene
Licences assigned to inactive accounts
Cross-references the inactive account list against paid assignments — this often covers the cost of the audit outright.
Duplicate or overlapping licences
Users holding two SKUs that provide the same capability.
Unassigned purchased licences
Seats being billed each month with nobody attached to them.
Right-sizing based on real app usage
Actual Outlook, Teams, SharePoint and OneDrive usage per user, so downgrades are based on evidence rather than guesswork.
Want to know where you actually stand?
Every one of these checks is run as part of a single point-in-time audit, delivered as a plain-English, risk-prioritised report.