Over-licensed user accounts
AI summary
User accounts in Microsoft 365 with multiple licenses containing overlapping applications waste resources through redundant assignments. The policy detects users assigned more than one license where the display name contains E5, E3, or E1. Consolidate by assigning each user a single appropriate license and use Rencore Governance to prevent future over-licensing.
What it detects
User accounts that have more than one License assigned with overlapping apps.
Why it matters
Users with multiple licenses containing overlapping applications waste resources through redundant assignments that provide no additional value. Consolidate overlapping licenses by identifying the most appropriate single license for each user's needs, remove redundant assignments to immediately reduce costs, and implement automated detection through Rencore Governance to prevent future over-licensing while ensuring users retain all necessary application access.
The rule
Every User that has more than 1 License assignments where Display Name contains 'E5' or Display Name contains 'E3' or Display Name contains 'E1'
In Rencore Governance
Details
| Applies to | User |
|---|---|
| Connector | Microsoft 365 |
| Severity | High |
| Category | Costs |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check User objects:
- Copilot adoption opportunity - E3/E5 users (Medium)
- Copilot license assigned to disabled account (High)
- Inactive Copilot users - 30 days (Medium)
- Excessive draft agent creation pattern (Medium)
- External users (Information)
- External users with pending acceptance (Low)
- Users with Power Platform Premium license (Information)
- Users with E3 license not using Outlook in last 12 month (Low)
- Users with passwords not changed in last 6 months (Medium)
- Disabled user accounts (Medium)
- Admin accounts with an Office 365 E3 license assigned (Medium)
- Administrators without MFA (High)
- External users invited 3 month ago with pending acceptance (Low)
- Disabled user accounts with assigned licenses (High)
- Global administrators without MFA (High)
- Guest users with a Dynamics license assigned (Medium)
- Inactive external users (Medium)
- Inactive internal users (Medium)
- Users who are creating Microsoft Loop Teams components (Medium)
Frequently asked questions
What does the over-licensed user accounts policy detect?
User accounts that have more than one License assigned with overlapping apps.
Which objects does the over-licensed user accounts policy check?
The Over-licensed user accounts policy checks User objects from the Microsoft 365 inventory and reports each one that matches its rule as a violation.
How severe is a violation of the over-licensed user accounts policy?
Violations of the Over-licensed user accounts policy have High severity. The policy is in the Costs category.
Which module includes the over-licensed user accounts policy?
The Over-licensed user accounts policy comes with the Microsoft 365 connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?