Microsoft 365 seat audit: find inactive M365 users and reclaim licenses.
Connect M365 read-only via Microsoft Graph. See every user with no Exchange / Teams / OneDrive / SharePoint activity in 30+ days, ranked by monthly cost. Also: blocked-but-licensed accounts and E5-on-E3-users downgrade candidates.
What the audit finds
Dormant accounts
No Exchange / Teams / OneDrive / SharePoint activity in 30+ days.
Blocked but licensed
Sign-in disabled but the license is still being billed. Easiest reclaim.
Wrong-tier users
E5 holders not using any E5-only feature — downgrade to E3 saves ~$21/user/mo.
Service-account licenses
Shared mailboxes and service accounts that shouldn't hold a paid license.
M365 waste math
| SKU | List price | 200 users · 22% ghost | Annual reclaim |
|---|---|---|---|
| Business Standard | $12.50/user/mo | $30,000/yr billed | ~$6,600 |
| Business Premium | $22/user/mo | $52,800/yr billed | ~$11,600 |
| E3 | $36/user/mo | $86,400/yr billed | ~$19,000 |
| E5 | $57/user/mo | $136,800/yr billed | ~$30,100 |
FAQ
How do I find inactive Microsoft 365 users?
Microsoft 365 admin center exposes last-activity reports per user via Microsoft Graph, but it doesn't rank by monthly cost, doesn't cross-check against HRIS offboarding, and doesn't produce a reclaim queue. SeatMap.AI connects via read-only Graph scopes (User.Read.All, Reports.Read.All, Directory.Read.All) and lists every account with no Exchange/Teams/OneDrive/SharePoint activity in 30+ days.
Does Microsoft charge for blocked or disabled users?
Yes — until you remove the license assignment. Blocking sign-in stops the user from logging in but does not stop billing. The license must be unassigned for the charge to drop at the next renewal. SeatMap.AI's #1 quick win for most M365 tenants is finding blocked-but-licensed accounts.
What does each M365 plan cost?
Business Basic ~$6/user/mo, Business Standard ~$12.50, Business Premium ~$22, E3 ~$36, E5 ~$57 (annual list, USD). A 200-person tenant mixing E3 and Business Premium with a 22% ghost rate typically burns $12,000–$18,000/year on unused seats.
Can the audit detect users on the wrong SKU?
Yes. Users assigned E5 who never use the E5-only features (Defender for O365 P2, Power BI Pro, Advanced eDiscovery) are flagged for downgrade to E3 — typically $21/user/mo in savings without losing anything they actually use.
What scopes does the audit need?
Read-only Microsoft Graph: User.Read.All, Reports.Read.All, Directory.Read.All. No mailbox content. No file content. No write scopes. Every reclaim requires explicit one-click confirmation and includes a 24-hour bypass window.
Does this work with hybrid AD / on-prem Exchange?
The audit reads activity from Microsoft Graph, which covers cloud workloads (Exchange Online, Teams, OneDrive, SharePoint Online). Hybrid users with on-prem mailboxes still show their cloud activity — if a hybrid user has zero cloud activity in 60+ days but holds a cloud license, that's a clear reclaim candidate.
Run your M365 audit.
Free. Read-only Graph scopes. No sales call.
Start free M365 audit