A Microsoft 365 licence audit for a UK business in 2026 typically finds three things: licences assigned to staff who left, users on heavier plans than they need, and add-on subscriptions nobody can name the owner of. The total overspend is rarely catastrophic. For a 40-person SME it is often £400 to £1,200 a month. Across a year that is enough to fund the security uplift the business has been postponing.
This is not a FinOps exercise. It is the small, practical end of cost discipline that most UK SMEs skip because nobody owns it. The finance team sees the monthly bill but cannot tell which user needs which licence. The IT supplier knows the licences but does not always get involved in commercial decisions. Mid-year is when the gap becomes obvious.
Below: the four most common places UK SMEs overpay on Microsoft 365 in 2026, how to find them, and what to do with the savings.
Where the overspend usually sits
Four recurring patterns across the SMEs we audit:
Leaver licences still active. Microsoft 365 licences continue to bill until the account is removed or downgraded. A leaver in March still being billed in November is common. The joiner-mover-leaver process is the operational fix; our Managed IT Services cover it.
Users on Business Premium who only need Business Standard. Business Premium adds Intune, Entra ID P1, Defender for Business and AzureAD. For a user who only sends email and joins Teams calls, the £6-per-user-per-month gap is wasted.
Users on Business Standard who should be on Business Premium. The inverse is also true. A user with admin access, sensitive data or finance approvals should be on Business Premium for the conditional access and Defender controls. Underspending in the wrong direction creates a security gap rather than a saving.
Forgotten add-ons. Visio plans, Project plans, third-party app subscriptions billed through the tenant, Power Automate premium connectors. Often added years ago for a specific project and never removed.
The two-step Microsoft 365 licence audit
Step one: pull the licence report from the Microsoft 365 admin centre. Filter by user, by licence type, by last sign-in. Anyone who has not signed in for 60 days is likely to be a leaver, an absent staff member or a service account that should be tagged differently.
Step two: for the users who are active, match each one to the licence they need. The default is Business Standard for general staff and Business Premium for anyone with admin access, sensitive data, or device management requirements. Most SMEs end up rebalancing about 20% of their seats.
The whole exercise takes a competent IT supplier half a day for a 40-to-100-person business. The output is a one-page reconciliation: which licences to downgrade, which to upgrade, which to remove. Net saving usually pays for the audit several times over within the first month.
What the savings should fund
The temptation when a licence audit returns money is to pocket it. The better play, for almost every SME we see, is to redirect the saving into the security or AI control work the business has been deferring.
Two specific candidates in 2026:
Microsoft Purview rollout. Businesses often underuse the sensitivity labels, DLP rules and monthly audit routine included in Business Premium. Our Microsoft Purview starter pack sets out a configuration most SMEs can land in a fortnight.
Copilot rollout for the three roles most likely to use it. Targeted, governed and trained. Our AI readiness check for SMEs covers what good rollout looks like at SME scale.
Either of these costs less than the typical licence saving and delivers more visible value than the saving alone.
When to run the audit
Twice a year minimum, ideally aligned to:
- Mid-year reforecast (May to July). FDs are reviewing run-rate costs and have time to absorb the recommendations.
- Annual budget cycle (October to December). Decisions for next year are being made and the audit informs them.
Plus any time the business hits a trigger event: a redundancy round, a funding event, an acquisition, the loss of a major client, the addition of a major client. Each of these changes the licence mix in a way that, if not actioned within a quarter, becomes overspend.
What an audit does not solve
A licence audit cleans up commercial waste. It does not fix:
- A poorly configured tenant (separate exercise)
- An underused product the team needs training on (separate exercise)
- A security baseline that does not meet Cyber Essentials v3.3 (separate exercise)
The audit is a financial discipline, not a security or productivity intervention. It buys the headroom to do the others.
Book the audit before the budget cycle hits
The Microsoft 365 bill is the easiest line item on the IT budget to question and the hardest to act on without a structured pass through the licence data. Most UK SMEs overpay between 10% and 20% on Microsoft 365 across the course of a year.
If you would like us to run a Microsoft 365 licence audit on your tenant and produce a one-page rebalance recommendation with the projected monthly saving, book a Unite Microsoft 365 licence audit and we will turn it round within two weeks.