Most organisations have the wrong Microsoft 365 mix — and pay for it twice.
Idle licences, oversized SKUs and missing security add-ons are the rule across Pacific Microsoft 365 estates we audit. ClearEdge gets the mix right so you stop overpaying for what you do not use and start using the security you are already entitled to.
You are probably overpaying for what is wrong and underpaying for what would actually protect you.
The patterns repeat across almost every Microsoft 365 estate we audit in the Pacific. Licences purchased years ago and never revisited. Staff who left twelve months ago still consuming a licence. Enterprise SKUs given to roles that never needed them. And — far more dangerously — a productivity-heavy, security-light mix that leaves the organisation exposed to the threats Microsoft already builds protection against.
Common patterns we find on day one of a licensing audit:
-
E5 licences for staff who only use Outlook
Enterprise SKUs purchased once for the leadership team and never reviewed — frontline staff inherit a licence they will never use ten cents of.
-
Third-party add-ons that duplicate what you already pay for
Standalone anti-phishing, MDM and DLP products bolted onto Microsoft 365 — when Business Premium already includes equivalent capability that just needs configuring.
-
Business Standard where Business Premium would protect you
Cheaper on the invoice, materially more expensive on the day of an incident — Business Premium adds Defender for Business, Intune, Entra ID P1 and Conditional Access for a small step up.
-
Apps for Business with zero security licences
Productivity covered, security entirely absent — common in small Pacific businesses that bought Microsoft 365 a few years ago and never revisited the mix.
Audit, right-size, activate the security you already paid for.
Licensing optimisation is not just about removing waste. The bigger prize is getting to a mix where the licences you have actually activate the security controls Microsoft already includes. Most organisations free up enough monthly spend through right-sizing to fund the security hardening work that should have been done years ago — and end up paying less while being materially better protected.
-
Audit your current estate
We pull a report of every active licence, who has it, and what they actually use. Most engagements find 10–25% of licences sitting on accounts that have not signed in this quarter.
-
Map licences to roles
Each role gets the smallest SKU that meets their genuine needs — including the security baseline. Frontline F-series, knowledge workers on Business Premium, leadership where E3 / E5 is actually warranted.
-
Right-size the mix
Downgrade or remove what you do not need; add what you should have had all along (often Defender add-ons or Entra ID P1 for staff who currently have neither).
-
Activate the security included
Most optimisation engagements free up enough monthly spend to fund the Microsoft 365 Hardening rollout that turns the included security controls on properly.
-
Manage on an ongoing basis
Monthly true-up, joiners and leavers, new SKU evaluation as Microsoft releases them — so the optimisation does not drift back over time.
-
CSP commercial benefits
Local invoicing in your currency, delegated tenant administration, one accountable partner for billing and support — without losing direct Microsoft access.
Right-sizing funds the security work.
Most optimisation engagements free up between 10% and 25% of monthly Microsoft 365 spend. That recovered budget typically funds the Microsoft 365 Hardening project — Conditional Access, MFA enforcement, Defender for Business, Intune device compliance — that activates the controls Business Premium already includes but most tenants leave dormant. Net result: better protection, often at lower spend than the unoptimised baseline.
See Microsoft 365 HardeningFrequently asked questions.
The questions South Pacific decision-makers ask most often before they engage on Microsoft 365 licensing.
How can I tell if my organisation is overpaying for Microsoft 365 licences?
Two quick signals: licences assigned to staff who have not signed in for 30 days (idle), and enterprise SKUs (E3 / E5) assigned to roles whose actual usage would be covered by Business Premium or even Business Standard. A licensing optimisation audit pulls both figures from your tenant in about a week. In our experience, Pacific organisations commonly find 10–25% of monthly licence spend is on idle, oversized or unnecessary SKUs.
What is the difference between Microsoft 365 Business Standard and Business Premium?
Business Standard gives you the productivity apps (Outlook, Word, Excel, Teams, SharePoint, OneDrive). Business Premium adds the full security and device management baseline: Defender for Business (endpoint protection), Intune (device management), Entra ID P1 (Conditional Access, MFA enforcement) and Defender for Office 365 (anti-phishing). For a relatively small monthly difference per user, Business Premium activates the controls a modern Pacific business actually needs. Most organisations that have been breached were on Standard or Apps-for-Business at the time.
What is a Microsoft Cloud Solution Provider (CSP) and why use one?
A CSP is a Microsoft partner authorised to resell Microsoft 365 and Azure with local invoicing, delegated tenant administration and a single support relationship. The licences themselves are identical to Microsoft direct — what changes is the commercial and operational wrapper around them. Most Pacific businesses benefit from CSP because it provides local currency billing, a partner who can act in the tenant under delegated permissions, and an accountable point of contact for any issue rather than navigating Microsoft support alone.
Can ClearEdge transition our existing Microsoft 365 tenant from another reseller?
Yes — this is a routine transition that does not require any disruption to users, data or settings. The change is a commercial reassignment of the partner-of-record on the tenant; mailboxes, documents, identities and permissions are untouched. The transition typically completes in a single billing cycle. As part of the move we run the optimisation audit so the first month under our CSP relationship is also the first month at a right-sized licence mix.
Do we need Microsoft 365 Copilot licences for every user?
No — and the answer is rarely yes at full coverage. Copilot is a high-value licence and benefits most when paired with proper data readiness (covered under AI Readiness & Adoption). The common pattern is to identify the roles where Copilot delivers measurable time savings (knowledge workers in marketing, finance, operations, customer service) and license those first. We size the Copilot allocation as part of the optimisation engagement rather than assuming organisation-wide rollout.
How often should we review our Microsoft 365 licence mix?
At minimum annually, ideally every six months. Microsoft releases new SKUs and capability changes frequently — for example, Defender for Business unbundling, Copilot tiering changes, Teams Phone evolution, and Entra ID licensing shifts. Internal change matters too: headcount up or down, role mix changes, security incidents, new compliance requirements. We include a six-monthly licence review for every CSP customer as part of the ongoing service rather than only at renewal.
What does Licensing Optimisation cost?
The audit and right-sizing is included for businesses that move their CSP relationship to ClearEdge — the recurring CSP margin funds the work. For organisations that want only the audit without changing their reseller relationship, we charge a flat fee based on user count, refundable if you choose to move the CSP afterwards. Either way, optimisation typically pays for itself in the first quarter through removed idle licences and right-sized SKUs.
Want a clearer picture of where your Microsoft 365 spend goes?
A licensing audit takes a week and surfaces every idle licence, oversized SKU and missing security add-on. No commitment to switch CSP.