# Trim unused software access before renewals Use Microsoft Entra access reviews and Microsoft 365 usage analytics to clean up stale access, verify need, and prepare for renewals. Canonical page: https://mosheldon.com/blog/trim-unused-software-access-before-renewals/ Author: OpenTech Consulting Published: 2026-10-24T12:00:00Z Updated: 2026-10-24T12:00:00Z If you want to reduce software waste before a renewal, start by checking who still has access and who still uses the product. Microsoft Entra access reviews can remove unneeded group, app, and role access, while Microsoft 365 usage analytics can show whether assigned licenses are actually being used. Together, they give small businesses and IT teams a repeatable way to clean up access before paying for another term. Microsoft documents access reviews as a way to recertify access and remove it when users no longer need it, and usage analytics includes a licensing report that shows license assignment distribution by month [access reviews](https://learn.microsoft.com/en-us/entra/id-governance/manage-user-access-with-access-reviews) [usage analytics](https://learn.microsoft.com/en-us/microsoft-365/admin/usage-analytics/usage-analytics?view=o365-worldwide). ## Why access cleanup should happen before renewal Renewals often fail for a simple reason: the organization tracks seats, but not actual need. A person may still be assigned to a Microsoft 365 group, an enterprise app, or a role long after their project ends or their job changes. Microsoft says access reviews are meant to keep only the right people on groups, enterprise applications, and roles, and that excessive access can create audit findings and security risk [access reviews overview](https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview). That same cleanup thinking applies to licensing. If access grants are stale, the related license assignment may be stale too. Usage analytics helps you see the other side of the problem. Microsoft says the report set includes a licensing view with the count of users assigned each license type and the monthly assignment distribution, plus user-level detail for the last complete calendar month. It also notes that user-level detail can help with adoption and licensing decisions [usage analytics](https://learn.microsoft.com/en-us/microsoft-365/admin/usage-analytics/usage-analytics?view=o365-worldwide). For renewals, that means you can compare what was assigned with what is actually active. ## Build a simple review workflow A practical workflow does not need to be complicated. It needs to be repeatable and owned. 1. **List the apps, groups, and license pools tied to the renewal.** Start with the resources that create the largest cost or risk. Microsoft Entra access reviews can target a group or an application connected to Microsoft Entra ID [manage user access](https://learn.microsoft.com/en-us/entra/id-governance/manage-user-access-with-access-reviews). If licenses are managed through a group, Microsoft also documents using groups to manage application licenses and recommends periodic access reviews so only authorized users stay in the group [group-based licenses](https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-group-licenses). 2. **Choose the right reviewer.** Microsoft supports self-review, manager review, group owners, or specified reviewers depending on what you are reviewing. For a small business, the manager or resource owner is often the most useful reviewer because they can answer whether the access still matches the job [manage user access](https://learn.microsoft.com/en-us/entra/id-governance/manage-user-access-with-access-reviews). 3. **Set a cadence before the renewal date.** Microsoft says access reviews can recur weekly, monthly, quarterly, or annually. For renewal cleanup, align the review to the contract cycle rather than the calendar year. If the renewal is annual, schedule the review several weeks before the procurement deadline so you have time to remove access and update counts [access reviews overview](https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview). 4. **Use reminders and apply the result.** Microsoft Entra sends reviewers an email by default, can send reminders, and can automatically remind users halfway to the end date if they have not responded. After the review ends, you apply the changes and remove access that is no longer needed [manage user access](https://learn.microsoft.com/en-us/entra/id-governance/manage-user-access-with-access-reviews). 5. **Cross-check with usage data.** Use the licensing report in Microsoft 365 usage analytics to compare assigned licenses with actual use. Microsoft says the report shows license types, assignment counts, and monthly distribution. If a user still has access but has not been active in the last full calendar month, that is a candidate for investigation, not automatic removal [usage analytics](https://learn.microsoft.com/en-us/microsoft-365/admin/usage-analytics/usage-analytics?view=o365-worldwide). ## Decide what to remove, and what to keep Not every unused-looking account should be removed immediately. Some people need access for irregular work, backup coverage, audits, or training. Microsoft explicitly notes that access reviews are useful when automation is not possible, when a group is used for a new purpose, or when business-critical data needs periodic reconfirmation [access reviews overview](https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview). That leads to an important tradeoff: usage data is useful, but it is not the same as business need. A low-activity user may still need a license for month-end reporting, shared mailbox support, or seasonal work. Use the review to ask the owner why access is still needed, not just whether the user logged in recently. For Microsoft 365, the usage analytics report only gives user-level detail for the last complete calendar month, so it is best for trend spotting, not for proving long-term lack of use [usage analytics](https://learn.microsoft.com/en-us/microsoft-365/admin/usage-analytics/usage-analytics?view=o365-worldwide). For Microsoft licensing, there is also a product-edition question. Microsoft states that access reviews require Microsoft Entra ID Governance for member users, and that some capabilities can work with Microsoft Entra ID P2; Microsoft Entra ID P1 is included in Microsoft 365 Business Premium, and Microsoft Entra ID P2 is included in some higher-tier plans and suites. Because Microsoft’s licensing page is detailed and sometimes plan-specific, verify the exact edition you own before building the workflow on a feature you may not have [licensing fundamentals](https://learn.microsoft.com/en-us/entra/fundamentals/licensing). If you manage licenses through groups, also confirm whether your current license supports the specific governance features you want to use. ## Turn the review into a repeatable process Once you complete one renewal cycle, capture the process so it can be reused. - **Define the owner.** Someone in IT, identity, or the business unit should own the review schedule and the final decision log. - **Record the evidence.** Keep the review date, reviewer, decision, and any business justification. - **Track follow-up actions.** If access is removed, confirm the license assignment changed as expected. - **Measure the result.** Compare assigned licenses before and after the cleanup, then compare that with active use in the next reporting month. If you already use lifecycle or entitlement workflows, you can connect access reviews to license management so renewals are not a one-time scramble. Microsoft notes that entitlement management can use periodic access reviews to ensure only authorized users stay in the group that carries licenses [group-based licenses](https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-group-licenses). For many small organizations, that is enough structure to move from ad hoc cleanup to a standard monthly or quarterly process. The practical rule is simple: review access first, then renew. If a user no longer needs the app, group, or role, remove the access before you renew the license. If the user still needs it, document why and keep the seat. That keeps the conversation grounded in business need instead of guesswork, and it gives IT a defensible process when renewal time comes around. ## Related guidance [Explore related guides](https://mosheldon.com/topics/cloud/) · [Discuss implementation support](https://mosheldon.com/services/). ## Sources and references - [Manage user access with Microsoft Entra access reviews - Microsoft Learn](https://learn.microsoft.com/en-us/entra/id-governance/manage-user-access-with-access-reviews): Primary process guidance for recurring access reviews: create reviews, assign reviewers, send reminders, apply decisions, and remove access no longer needed. - [Microsoft 365 usage analytics overview - Microsoft Learn](https://learn.microsoft.com/en-us/microsoft-365/admin/usage-analytics/usage-analytics?view=o365-worldwide): Provides the usage analytics perspective, including licensing data and monthly assignment distribution, which can complement access reviews before renewals. - [What are access reviews? - Microsoft Entra ID Governance](https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview): Explains why access reviews matter for keeping only the right people on groups, enterprise apps, and roles; useful as the rationale for license cleanup tied to access. - [Manage the lifecycle of group-based licenses in Microsoft Entra ID - Microsoft Learn](https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-group-licenses): Shows how groups can be used to manage application licenses and recommends periodic access reviews so only authorized users keep the licenses. - [Microsoft Entra licensing - Microsoft Learn](https://learn.microsoft.com/en-us/entra/fundamentals/licensing): Documents licensing fundamentals and the access-review licensing model, which is important when planning who needs which Microsoft Entra capabilities for the review process.