CNNECT Lens · Microsoft 365 license optimisation

Stop paying for licenses nobody uses.

Lens maps every Microsoft 365 license to real usage, from mail and Teams to desktop apps and Copilot. It then shows what to reclaim, right-size or reassign, with the evidence behind every recommendation.

Start your assessment Explore the demo
Read-only, delegated access Runs in your browser No agents, secrets or data copies
Northwind TradersDemo tenant
£55,846
a year in savings identified (28% of license spend)
153
users with a recommended change
65
purchased seats nobody holds
72%
license efficiency today
Top findings
  • Purchased licenses not assigned to anyone£12,822/yr
  • Licensed users inactive for more than 90 days£7,823/yr
  • Copilot licenses with low or no usage£6,521/yr
  • Disabled accounts still hold licenses£5,215/yr
Indicative UK list pricesOpen the full report

What Lens finds

Every finding shows who is affected, the evidence, why it matters and how to fix it, priced in pounds per year.

Unused licenses

Inactive and disabled accounts, people who have never signed in, and purchased seats no one holds.

Reclaim · reassign · cancel at renewal

Right-sizing

Users on E5 who only need E3, and desk-light staff who fit F3, judged on the apps and features they actually use.

Desktop vs web vs mobile usage

Overlaps

Paying twice for the same thing, such as standalone Defender, Intune or Entra plans that a suite already includes.

Real Microsoft service-plan lists

Idle add-ons

Visio, Project, Power BI Pro, Teams Phone and Audio Conferencing licenses with no sign of use.

Activations · sign-ins · call records

Copilot adoption

Idle Copilot seats, who is getting value, and the best candidates for the next licenses you buy.

Per-app usage · free Copilot Chat

Shadow AI

Who is using ChatGPT, Claude, Gemini, Grok and other external AI tools, as seen by Microsoft Defender.

Defender hunting · Cloud Discovery

Three steps, no installs

Lens runs in the browser with Microsoft sign-in. Most assessments finish in under fifteen minutes.

Step 01

Approve once

An admin approves Lens's read-only permissions for your organisation. It takes about a minute and is needed only once.

Global Administrator or Cloud Application Administrator
Step 02

Sign in and run

Sign in with your work account. Lens detects your tenant and collects licenses, sign-ins and usage reports.

Global Reader + Reports Reader is enough
Step 03

Act on the report

Prioritised findings with £ savings, per-user evidence and CSV exports. Names can be pseudonymised before you share it.

Save the report as a file to revisit it

Built to be trusted

Lens reads what it needs and nothing more, and never writes to your tenant.

  • Read-only, delegated permissions. Lens sees only what the signed-in person is allowed to see, and nothing is written to your tenant.
  • No agents, secrets or certificates. Nothing to install and nothing for us to store.
  • Built in your browser, kept securely. Lens reads Microsoft Graph directly from your device. The finished report is saved to CNNECT so a consultant can review it with you, and deleted after 180 days.
  • Works with privacy settings on. If report names are concealed, Lens maps usage from sign-in events instead.
  • Remove it any time. Delete it from Entra › Enterprise applications in one click.

See what you could save

Explore a complete report for a 400-user demo tenant, or set Lens up for your organisation in two minutes.

Start your assessment Explore the demo