Office 365 Security - Episode 2

A live demo of Microsoft 365 licensing analytics shows how to track owned vs assigned licenses and usage across services. The dashboard reveals that organizations often own far more licenses than they use: one example shows 200 owned licenses but only 83 assigned, with just 20.4% functionality used across 43 services. The tool helps decide what to actually buy based on which users need which products.
Questions this video answers
200
83
83% (83/100)
41% (83/200)
Approximately 20.4% (reported as ~20%)
Chapters
Foreign. You'll see here they own 200 licenses. This is a partner account of ours, so we get 200 free. So there's 200 in here. But the key thing is you'll see 83 assigned. Okay? And so normally we would see something like 100 owned, 83 assigned. Microsoft would look at that as 83% consumed. In this case, they're considering it 41% consumed. 83 divided by 200. And that's how they look at your deployment. But over here on the right, we can actually see that we're only using 20.4% of the functionality of all of those 43 services and plans. We're only using 20% of them. When Microsoft says things like, we have an 11% price increase on M365E3 because we included all these other new products, we can go and say we're not actually using them with data. I have the ability to actually dive into this and go and see which users are using this. Now, right now, because I'm in a demo account, this is anonymized. In a customer account, you would see your user here. But the thing here is, like, what I want to show is I can see. Start to see things like, for instance, this user here has used this product or service that I drilled into. I think it went into Azure ad. So they've gone in, they've used it, but they haven't used it in 30 days. The last time they used it was in 38 days. Actually. This user here has had it assigned and never used it. This user's used it in the past, but hasn't used it in over 180 days. Why is that? Right? So when I'm starting to look at things, it's like, why is it that I have users that aren't using things and things like that? I can dive in and figure it out. So the reality is this person that hasn't used it in over 415 days was probably somebody that was given an account that never used it, or it's a service account that's never been used. There's all kinds of different reasons, and we can dive in and figure that out. But the key thing to note is I can go in and start to look at these things now. Again, this is just a small demo account, but what I wanted to show you is when you start talking about security, Microsoft has this thing called the E5 security suite that's made up of Azure active directory plan 2. It's made up of Microsoft Defender, it's made up of Office Safe Docs and all these different products and services, I can go in and do the same thing here. I can see if my users are actually using these products, right? So if it's green, I can tell whether a user's using it. If it's yellow, I can't. Now, the reason for usually why I can't tell if a user is using it is that it's turned on at a tenant level, right? So what does that mean? That means that with that functionality is not set to the user, it is set to the tenant. And so when that gets turned on, all users in the tenant actually have access to that product. And there's no way to tell whether an individual user is using it because the tenant itself is protected. That causes some licensing challenges. Because if I turn some of those features on our users using it, getting advantage of it, if they don't have the licenses that include in it, there's some analysis that needs to be done. But again, when we're buying these things, I can go in and I can take a look and see if all these things are being used or not. You'll also see that I can see whether they're being purchased through the M365 or through the E5. You can tell here, just if I look at the second one here, this is Azure active directory plan 2. So this user has access to that through an E5. This user here only has access to that through the E5 security. So I can actually start to differentiate where people are using it. So if you think about applications like power apps that I get in an E5 and then I can buy standalone, I can see if my E5 users are actually using it. I can see if my standalone people are using it. So I can see where it's bought to figure out what I need to be doing from a licensing perspective.
More from Mike

Microsoft Add-Ons Hidden Costs Explained | EA Renewal Risk & License Optimization Expertise Sharing

SaaS Sprawl Explained: How Decentralized Software Buying Destroys Negotiation Leverage.

Microsoft EA Renewal Strategy: Mike Austin Explains How the War Room Method Works.







