Group-based licensing assignment audit

Overview

Dynamic groups + GBL automate licensing but hide drift when rules wrong.

Audit quarterly

1. Compare assigned licenses vs group membership export.
2. Find disabled users still receiving licenses via nested group surprises.

Fix

Refine dynamic rule OR split into license-specific groups.

Reporting

Cost savings opportunities in QBR (E5 features on interns, etc.).

Guardrails

Separate license admin from user admin roles via PIM.