Admin accounts with an Office 365 E3 license assigned
AI summary
Admin accounts with Office 365 E3 licenses assigned lead to unnecessary costs and security risks since administrators do not need the full productivity features those licenses provide. Review these assignments and downgrade them to licenses that provide only necessary administrative capabilities. Set up regular audits in Rencore Governance to keep license assignments aligned with actual usage and organizational needs.
What it detects
Admin accounts with an Office 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more E3 license assigned (Note: please adjust the email address, prefix or postfix to your company settings).
Why it matters
Administrative accounts typically don't require the full productivity suite included in E3 licenses, leading to unnecessary costs and potential security risks from unused features. Review all admin accounts with E3 licenses and downgrade to more appropriate, cost-effective licenses that provide only the necessary administrative capabilities, then implement regular audits through Rencore Governance to ensure license assignments align with actual usage patterns and organizational needs.
The rule
Every User where User Email starts with 'admin_' that has any License assignments where Display Name contains 'E3'
In Rencore Governance
Details
| Applies to | User |
|---|---|
| Connector | Microsoft 365 |
| Severity | Medium |
| Category | Costs |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check User objects:
- Copilot adoption opportunity - E3/E5 users (Medium)
- Copilot license assigned to disabled account (High)
- Inactive Copilot users - 30 days (Medium)
- Excessive draft agent creation pattern (Medium)
- External users (Information)
- External users with pending acceptance (Low)
- Users with Power Platform Premium license (Information)
- Users with E3 license not using Outlook in last 12 month (Low)
- Users with passwords not changed in last 6 months (Medium)
- Disabled user accounts (Medium)
- Administrators without MFA (High)
- External users invited 3 month ago with pending acceptance (Low)
- Disabled user accounts with assigned licenses (High)
- Global administrators without MFA (High)
- Guest users with a Dynamics license assigned (Medium)
- Inactive external users (Medium)
- Inactive internal users (Medium)
- Over-licensed user accounts (High)
- Users who are creating Microsoft Loop Teams components (Medium)
Frequently asked questions
What does the admin accounts with an Office 365 E3 license assigned policy detect?
What does the admin accounts with an Office 365 E3 license assigned policy detect?Admin accounts with an Office 365 E3 license assigned (Note: please adjust the email address, prefix or postfix to your company settings).
Which objects does the admin accounts with an Office 365 E3 license assigned policy check?
Which objects does the admin accounts with an Office 365 E3 license assigned policy check?The Admin accounts with an Office 365 E3 license assigned policy checks User objects from the Microsoft 365 inventory and reports each one that matches its rule as a violation.
How severe is a violation of the admin accounts with an Office 365 E3 license assigned policy?
How severe is a violation of the admin accounts with an Office 365 E3 license assigned policy?Violations of the Admin accounts with an Office 365 E3 license assigned policy have Medium severity. The policy is in the Costs category.
Which module includes the admin accounts with an Office 365 E3 license assigned policy?
Which module includes the admin accounts with an Office 365 E3 license assigned policy?The Admin accounts with an Office 365 E3 license assigned policy comes with the Microsoft 365 connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?