Microsoft 365 Licensing Assessment
in Managed IT ServicesDigital Office Systems
Monday to Friday 9:00 - 5:00
Microsoft 365 Assessment and Audit Services
Understand who controls your Microsoft 365 environment, how securely it is configured and whether your licences, users and services are being managed properly.
Digital Office Group provides detailed Microsoft 365 assessments and audits covering tenant ownership, administrator access, security, licensing, user accounts, email, backup and external supplier permissions.
Book a Microsoft 365 AuditGain Clear Control of Your Microsoft 365 Environment
Many organisations rely on Microsoft 365 every day but do not know who owns the tenant, which suppliers have access or how securely important services have been configured.
A Microsoft 365 audit gives your organisation a clearer understanding of the current environment and identifies areas where access, security, licensing or administration should be improved.
Our assessment can be provided as a standalone service or alongside our wider Microsoft 365 support services.
Our Microsoft 365 audit can include:
- Tenant ownership and control
- Global administrator access
- Partner and supplier permissions
- Microsoft 365 licence usage
- User and mailbox reviews
- Multi-factor authentication
- Security configuration
- External sharing
- Email security
- Backup and recovery arrangements
What Does a Microsoft 365 Audit Review?
Our assessment looks at the areas that affect control, security, cost and day-to-day administration.
Tenant Ownership
Confirm the Microsoft 365 tenant belongs to your organisation and identify who controls the domains, billing and administrative access.
Administrator Access
Review global administrators, privileged roles, emergency accounts and whether admin access is appropriately restricted.
Security Configuration
Assess authentication, account protection, sharing and other settings that affect the security of the tenant.
Licence Usage
Identify unused, duplicated or unsuitable licences and opportunities to improve value.
User Accounts
Review active, inactive, shared and former employee accounts and identify access that should be removed.
Backup and Recovery
Confirm whether Microsoft 365 data is protected independently and whether recovery arrangements are suitable.
Microsoft 365 Tenant Ownership Audit
Your organisation should retain appropriate control of its Microsoft 365 tenant, domains, data and administrator access.
In some cases, a previous IT provider may have created the environment, controlled the billing relationship or retained administrative permissions without the customer fully understanding the arrangement.
We can identify the current ownership structure and recommend changes that help your organisation maintain control.
Your organisation should know:
Who owns the Microsoft 365 tenant, who holds global administrator access and which external suppliers can make changes.
You should also understand who controls the domain, licensing and billing relationships connected to the service.
Administrator reviews can include:
- Global administrator accounts
- Privileged role assignments
- Unused administrator accounts
- External supplier access
- Emergency access accounts
- Separate administrator identities
- Multi-factor authentication
- Everyday use of privileged accounts
- Account ownership
- Access documentation
Global Administrator and Privileged Access Review
Global administrators can make significant changes across Microsoft 365, including creating accounts, resetting passwords and altering security settings.
Too many privileged accounts increase risk, particularly when they are used for everyday email and general work.
Our audit identifies who has elevated access and whether those permissions remain necessary and appropriately protected.
Microsoft 365 Security Assessment
A Microsoft 365 security review examines the controls protecting user accounts, company information and cloud services.
Multi-Factor Authentication
Review whether users and privileged accounts are protected with appropriate additional verification.
Account Security
Identify inactive accounts, weak access practices and unnecessary permissions.
External Sharing
Review how files, SharePoint sites and Teams content can be shared outside the organisation.
Security Alerts
Check whether suspicious sign-ins and other important alerts are reviewed and acted upon.
Multi-Factor Authentication Audit
Multi-factor authentication helps protect accounts when passwords are stolen through phishing, reused or exposed in external data breaches.
Our assessment reviews whether MFA is enabled consistently, whether administrator accounts receive stronger protection and whether users have appropriate authentication methods registered.
Any gaps can be addressed through our wider managed cyber security services.
We can review:
- MFA coverage across users
- Privileged account protection
- Registered authentication methods
- Legacy authentication exposure
- Conditional access settings
- Remote and mobile access
- Emergency access accounts
- Users excluded from security policies
- Authentication failures
- User enrolment processes
Security settings only help when they are managed
Microsoft 365 may generate sign-in alerts and security recommendations, but these still need to be reviewed and acted upon.
An audit helps identify whether monitoring and response responsibilities are clearly defined.
Sign-In and Security Alert Review
Suspicious sign-ins, unfamiliar locations and unusual account activity may indicate attempted or successful compromise.
We can review available sign-in information, alert settings and the process used to investigate unusual activity.
Where continuous monitoring is required, this can be supported through wider cyber security and Managed Detection and Response services.
Microsoft 365 Licence Audit
Licence costs can increase as employees join, leave and change roles, particularly when subscriptions are not reviewed regularly.
Unused Licences
Identify subscriptions assigned to inactive users or retained after employees have left.
Incorrect Licence Types
Review whether users have suitable plans for the applications, security and services they require.
Duplicate Services
Identify separate products that may overlap with features already available through existing licences.
Shared Mailboxes
Review whether certain functional addresses could be configured differently and managed more efficiently.
Security Gaps
Identify users who may require stronger security or device-management features.
Future Requirements
Plan licences around expected growth, new systems and changes in working practices.
User Account and Leaver Audit
Former employees, unused guest accounts and shared credentials can create unnecessary security and licensing risk.
Our audit reviews the user directory and identifies accounts that may need to be disabled, removed, reassigned or investigated.
We also review whether there is a clear onboarding and offboarding process for employees joining, leaving or changing roles.
User account reviews can include:
- Inactive user accounts
- Former employee accounts
- Guest users
- Shared accounts
- Unlicensed accounts
- Mailbox delegation
- OneDrive ownership
- Group memberships
- Role changes
- Onboarding and offboarding processes
Email review areas can include:
- Shared mailbox access
- Mailbox forwarding
- Delegated permissions
- Distribution groups
- External auto-forwarding
- Email aliases
- Transport rules
- Spam and phishing protection
- Mailbox retention
- Mobile email access
Exchange Online and Email Audit
Email configuration can affect both productivity and security.
We can review mailboxes, forwarding, delegation, shared access and other Exchange Online settings that may create unnecessary exposure or confusion.
Our findings can be supported through ongoing business IT support and Microsoft 365 administration.
SharePoint, OneDrive and Teams Audit
Collaboration tools can become difficult to control when permissions, external sharing and ownership are not reviewed.
SharePoint Permissions
Review access to sites, document libraries and sensitive company information.
External Sharing
Identify content shared with guests, suppliers and external email addresses.
OneDrive Ownership
Review how user files are managed when employees leave or accounts are disabled.
Teams Governance
Review team ownership, guest access, inactive groups and file permissions.
Cloud availability is not the same as backup
Microsoft 365 may remain online while individual files, mailboxes or accounts are deleted, altered or compromised.
Independent backup provides a separate recovery option outside the live tenant.
Microsoft 365 Backup Audit
Our assessment reviews whether Exchange Online, OneDrive, SharePoint and Teams-related information is protected independently.
We can also examine retention, backup monitoring, recovery processes and whether your organisation has tested restoration.
Recommended improvements can be delivered through our disaster recovery services.
Microsoft 365 Audit for Cyber Essentials
Microsoft 365 configuration can affect your organisation's ability to meet Cyber Essentials requirements.
Administrator Access
Review privileged accounts and ensure unnecessary administrative rights are removed.
Multi-Factor Authentication
Check whether relevant users and cloud services are protected appropriately.
Supported Applications
Review whether Office applications and connected systems remain supported and updated.
User Access Control
Confirm users only have the permissions required for their roles.
Account Management
Check how joiners, leavers and role changes are handled across the tenant.
Certification Support
Continue through our Cyber Essentials certification service.
What You Receive from the Audit
The purpose of the assessment is to provide clear, practical findings that your organisation can act upon.
Executive Summary
A clear overview of the current environment, key risks and important findings.
Technical Findings
Detailed observations covering ownership, access, security, licences and cloud services.
Priority Actions
Recommendations ranked by urgency, risk and business impact.
Improvement Roadmap
A practical plan for immediate fixes, medium-term changes and ongoing management.
Our Microsoft 365 Audit Process
1. Discovery
We discuss your users, suppliers, licences, systems and current concerns.
2. Access Review
Tenant ownership, administrators and external permissions are examined.
3. Configuration Audit
Security, accounts, email, sharing, licences and backup are reviewed.
4. Reporting
Findings and recommendations are documented and prioritised.
5. Remediation
Our team can implement agreed changes and provide ongoing support.
When Should You Audit Microsoft 365?
A Microsoft 365 assessment is particularly valuable when:
- You are changing IT providers
- You are unsure who owns the tenant
- You do not know who has administrator access
- Microsoft 365 costs have increased
- Employees have joined or left without a formal review
- You are preparing for Cyber Essentials
- You have experienced a security incident
- You are reviewing cyber insurance
- You are moving to Microsoft 365 Business Premium
- You want independent reassurance before renewing a contract
Do not wait until access becomes a problem
Tenant control and administrator access are easiest to correct while your existing provider remains cooperative and the environment is still accessible.
An early audit helps protect your options and reduce disruption during a future supplier change.
Why Choose Digital Office Group?
Digital Office Group combines Microsoft 365 expertise with wider knowledge across managed IT, cyber security, backup, networks and business continuity.
As a family-owned business established in 1994, we support organisations across the Midlands and throughout the UK.
We do not simply identify weaknesses. Our team can help implement the recommended changes and provide ongoing management after the audit.
Why work with us?
- Family-owned and established in 1994
- ISO 9001 and ISO 27001 certified
- Experienced UK-based IT team
- Microsoft 365 licensing expertise
- Tenant ownership and access reviews
- Cyber security and MFA assessments
- Microsoft 365 backup expertise
- Cyber Essentials support
- Technical remediation available
- Ongoing managed support options
Microsoft 365 Assessment and Audit FAQs
What is a Microsoft 365 audit?
A Microsoft 365 audit reviews tenant ownership, administrator access, security, users, licences, email, sharing and backup arrangements.
Why should we audit Microsoft 365?
An audit can identify security gaps, unnecessary costs, unused accounts, excessive permissions and unclear supplier access.
Can you confirm who owns our Microsoft 365 tenant?
Yes. We can review tenant access, domains, administrator accounts, partner relationships and available ownership information.
Can you see who has global administrator access?
Yes. We can review global administrators and other privileged roles and identify accounts that may no longer require elevated access.
Can you review our Microsoft 365 licences?
Yes. We can identify unused, unsuitable or duplicated licences and recommend a more appropriate structure.
Can you check whether MFA is enabled?
Yes. We can review MFA coverage, privileged account protection and users excluded from relevant security policies.
Can you audit SharePoint and Teams permissions?
Yes. We can review ownership, guest access, external sharing and user permissions across SharePoint, OneDrive and Teams.
Can you review Microsoft 365 backup?
Yes. We can assess whether Microsoft 365 data is protected independently and whether recovery arrangements are suitable.
Can you help us change Microsoft 365 provider?
Yes. The audit can identify access and ownership requirements before we plan a controlled transfer to a new provider.
Can you implement the recommendations?
Yes. Our team can make agreed changes across licences, accounts, security, permissions, backup and administration.
How often should Microsoft 365 be audited?
A review should be completed regularly and whenever there are major changes such as growth, supplier changes, incidents, acquisitions or certification requirements.
How much does a Microsoft 365 audit cost?
Pricing depends on the number of users, complexity of the tenant, required audit depth and whether remediation or ongoing support is included.
Do You Know Who Controls Your Microsoft 365 Tenant?
Arrange a Microsoft 365 assessment with Digital Office Group. We will review your ownership, administrator access, licences, security and backup arrangements and provide a clear improvement plan.
Book Your Microsoft 365 Audit