I looked at a small organisation’s Microsoft 365 setup last month. Before admin access was even available, a…
Lee F. — IAM & GRC Consultant | Identity Governance, Access Control & Security Design
I looked at a small organisation’s Microsoft 365 setup last month.
Before admin access was even available, a quick review pointed to around $3,850 to $5,450 a year in potential licensing waste.
5 former staff still had active accounts.
12 Power Automate licences assigned but never used.
Shared mailboxes running full licences they did not need.
Nothing unusual.
The IT provider was doing their job. Systems were running. Backups were in place. Support was there when needed.
But no one had ever stepped back and asked the bigger questions.
Who still has access.
Whether that access is still appropriate.
Whether the setup actually reflects how the organisation operates today.
That usually sits outside what IT providers are engaged to do.
So it often goes unchecked.
If you are running on Microsoft 365 with around 10 to 50 staff and no dedicated internal IT or security role, it is worth taking a proper look.
A short independent review can surface things quickly.
7 reactions · 0 comments