Seat CensusMicrosoft 365 license and tenant health audits
Every Microsoft 365 seat, accounted for.
Seat Census finds the licenses you pay for and don't use, and the gaps in your tenant you didn't know about. Then it tells you what to fix first, in an executive summary you can hand to leadership and a detailed report your team can work through.
For Global Admins of a Microsoft 365 tenant. Sign in with Microsoft; there's nothing to install. Seat Census only reads your tenant, unless you confirm a change.
Two audits
Spend and risk, in one pass
Run both audits together or one at a time. Each one ends with a one-page executive summary, totals only, and a detailed report with every finding and the objects involved.
Find the licenses you're paying for and not using
- Paid licenses on disabled accounts, and seats bought but never assigned
- Users with no activity for 90 days or more
- Service accounts on E3 and E5 suites, and guests with paid licenses
- Copilot licenses that are barely used
- Spend and utilization for every license, and waste per year at your prices
- Mailboxes on Litigation Hold, so you don't reclaim the wrong ones
See the gaps before someone else does
- A security baseline: MFA for everyone and for admins, legacy authentication, user consent to apps, device code flow
- Apps holding high- and medium-risk permissions
- App secrets and certificates that have expired or are about to
- Apps and groups with no owner
- Inactive groups, dormant SharePoint sites and likely duplicates
- Conditional Access policies that are disabled, stale or pointing at unused locations
Tools
Fifteen lookups for the questions you get every day
Who can get into this mailbox? Why can't she sign in? Where is this group used? Each tool answers one question about one user, group, app or number. Copy the result, export it as CSV, or save a dated PDF for the ticket.
User access summary
Licenses and what they cost, admin roles, groups and what they own: onboarding and offboarding in one view.
Sign-in check
Why can't they sign in? Recent sign-ins, MFA methods and the Conditional Access policies applied.
User's devices
Every device a user has, with compliance, encryption and devices that stopped checking in.
Guest user lookup
Who invited a guest, what they can reach, and what was shared with them.
Who changed this?
The audit log for a user, group, app, device or Conditional Access policy, old value to new.
User data summary
Mailbox, archive and OneDrive against their quotas, with the holds that keep data.
Mail forwarding and inbox rules
Everywhere a mailbox's mail can go without its owner sending it.
Mailbox access
Who has Full Access, Send As, Send on Behalf or calendar rights, both ways.
Message trace
Was it delivered? If not, why: quarantined, filtered as spam, bounced or pending.
Dynamic distribution groups
The dynamic distribution groups a user ends up in.
Where a group is used
Conditional Access, licensing, apps, admin roles and Intune assignments that name a group.
Team or site access
Owners, members, private channels and files shared on their own.
Enterprise app lookup
Permissions, consents, owners, credentials and sign-ins, with disable, enable or delete when you confirm.
Teams call forwarding
Where a user's Teams calls go: forwarding, unanswered calls, call groups and delegates.
Phone number lookup
Who a phone number belongs to: a user, an auto attendant, a call queue or nobody.
How it works
From sign-in to a plan in three steps
Sign in with Microsoft
As a Global Admin of your tenant. Approve Seat Census's permissions once, on one Microsoft consent screen. It acts as you, with your rights, only while you use it.
Run the audits
They run on our servers, in the background. Close the tab if you like: the results are waiting when you come back.
Act on the results
Start with the top actions in each summary. Hand the PDF to finance or leadership, and work through the detailed report with your team.
Your tenant's data
Built so your data stays yours
- Read-only. The audits and tools only read. A change happens only when you confirm it, and its permission is asked for only then.
- Encrypted with your own key. Every tenant's results are encrypted with that tenant's key, kept apart from the data.
- Sign-ins last a session. Your Microsoft tokens are kept only while you're signed in, and deleted when you sign out.
- Gone when you leave. Close your account and everything is deleted at once, key included.
- No tracking. No analytics, no ads, no third-party scripts, here or in the app.
Plans
Start free, upgrade when you need more
One subscription covers one Microsoft 365 tenant. Every plan includes both audits and all fifteen tools.
Free
$0
- Both audits, once every 7 days
- Executive summaries, with PDF and image
- All fifteen tools
- Your latest audit kept
Standard
Coming soon
- Audits any time
- Your own settings and license prices
- Detailed reports, with Save as PDF
- Full history of your audits
Pro
Coming soon
- Everything in Standard
- The data behind every report: searchable tables, files and logs
- The live log while an audit runs
See your tenant the way Seat Census does
Sign in with your Microsoft 365 Global Admin account and run both audits free. No credit card required.
Start free