Disabled user accounts with assigned licenses

Last updated Oct 17, 2026 Policies Licences & Costs

AI summary

Disabled user accounts with assigned licenses provide no business value and can create security vulnerabilities. Identify these accounts, review each for Power Automate flows or shared resources, then remove licenses and transition ownership to prevent service disruptions.

Severity: High Costs Generally available

What it detects

Shows disabled user accounts which have any licenses assigned.

Why it matters

Licenses assigned to disabled accounts directly impact your organization's costs while providing no value and potentially creating security vulnerabilities. Remove all licenses from disabled accounts to reclaim costs, use Rencore Governance to verify whether critical dependencies like Power Automate flows or shared resources depend on these accounts, then transition ownership before license removal to prevent service disruptions.

The rule

Every User where Account enabled is false that has any License assignments

In Rencore Governance

Details

Applies to	User
Connector	Microsoft 365
Severity	High
Category	Costs
Recommended	No
Recommended automation	None
License type	Standard

Other policies that check User objects:

Copilot adoption opportunity - E3/E5 users (Medium)
Copilot license assigned to disabled account (High)
Inactive Copilot users - 30 days (Medium)
Excessive draft agent creation pattern (Medium)
External users (Information)
External users with pending acceptance (Low)
Users with Power Platform Premium license (Information)
Users with E3 license not using Outlook in last 12 month (Low)
Users with passwords not changed in last 6 months (Medium)
Disabled user accounts (Medium)
Admin accounts with an Office 365 E3 license assigned (Medium)
Administrators without MFA (High)
External users invited 3 month ago with pending acceptance (Low)
Global administrators without MFA (High)
Guest users with a Dynamics license assigned (Medium)
Inactive external users (Medium)
Inactive internal users (Medium)
Over-licensed user accounts (High)
Users who are creating Microsoft Loop Teams components (Medium)

Frequently asked questions

What does the disabled user accounts with assigned licenses policy detect?

The Disabled user accounts with assigned licenses policy shows disabled user accounts which have any licenses assigned.

Which objects does the disabled user accounts with assigned licenses policy check?

The Disabled user accounts with assigned licenses policy checks User objects from the Microsoft 365 inventory and reports each one that matches its rule as a violation.

How severe is a violation of the disabled user accounts with assigned licenses policy?

Violations of the Disabled user accounts with assigned licenses policy have High severity. The policy is in the Costs category.

Which module includes the disabled user accounts with assigned licenses policy?

The Disabled user accounts with assigned licenses policy comes with the Microsoft 365 connector in the Digital Workplace module of Rencore Governance, which every Plan includes.

Was this page helpful?