Microsoft 365 Cost Optimization

Optimize Your M365 Licensing.
Save More. Spend Less.

BEAK M365 License Optimizer connects to your Microsoft 365 tenant via the Graph API, analyzes real usage data, and delivers AI-driven recommendations to eliminate waste and reduce licensing costs.

40% Avg. cost reduction
3 Minutes to first sync
100% Multi-tenant isolated
BEAK Dashboard
Total Licenses
2,847
Monthly Spend
$41,280
Potential Savings
$8,340/mo
Utilization
67%
E3
E1
BP
F1
E5
Remove34 inactive users · $1,820/mo
Downgrade89 users · $4,230/mo
Upgrade12 users · $290/mo
Key Capabilities

Everything You Need to Right-Size Your M365

A complete platform for license visibility, cost control, and governance — without leaving your browser.

🔄

Automated Data Collection

Pulls license assignments, subscriptions, and usage data directly from Microsoft 365 via the Graph API. Scheduled syncs keep data fresh with no manual exports.

💰

Cost Analysis & Savings

Identify overspend with actionable recommendations to downgrade, upgrade, or remove licenses — backed by real mailbox, OneDrive, SharePoint, and Teams usage.

📋

Procurement Workflows

Built-in request and approval lifecycle with email-based approvals. Approvers act directly from their inbox — no platform login required. HMAC-secured for 7 days.

🔐

License Governance

Manual and bulk license allocation from company pools, deallocation tracking, and a full audit log for every action — built for compliance and governance teams.

🏆

MPN Benefit Tracking

Detect and track Microsoft Partner Network benefits automatically via Partner Center API. See MPN utilization, estimated savings, and manage subscription sources.

📊

Plan Catalog & Comparison

Browse all Microsoft 365 plans with monthly and annual pricing. Compare up to 4 plans side-by-side with full feature breakdowns organized by category.

Simple Setup

Up and Running in Minutes

Three steps from setup to savings — no complex integrations, no agents to install.

01
🔌

Connect

Register an Azure AD app with the required read permissions, enter your credentials in the BEAK Setup Wizard, and trigger your first sync. Done in under 5 minutes.

  • Azure Tenant ID + Client ID + Secret
  • One-time Setup Wizard (3 steps)
  • Optional: Certificate-based auth
02
🔍

Analyze

BEAK collects all user license assignments, organization subscriptions, and usage data from Exchange, OneDrive, SharePoint, and Teams — and updates automatically.

  • Mailbox, OneDrive, Teams usage
  • License SKU costs + utilization
  • Inactive user detection
03

Optimize

Review AI-driven recommendations with usage scores. Remove unused licenses, downgrade over-provisioned users, and project your optimized monthly spend.

  • Remove / Downgrade / Upgrade
  • Usage Score per user (0–100%)
  • Export to CSV or Excel
Dashboard

Powerful Analytics at a Glance

The BEAK Dashboard gives instant visibility into your entire M365 license estate — costs, utilization, savings, and inactive users all in one view.

📦

KPI Cards

Total Licenses · Active Users · Monthly Spend · Potential Savings · Utilization — all at the top of every session.

🍩

License Distribution Chart

Donut chart of your top 10 license SKUs by assignment count, with a scrollable legend showing counts and percentages.

📈

Cost Trend Chart

Monthly cost trend line with a dashed green "optimized" projection showing what you'd spend after applying all recommendations.

🏆

Top Savings Opportunities

Top 10 individual recommendations sorted by monthly savings — user, action type, current SKU, recommended SKU, and usage score.

😴

Inactive Users Table

Users with zero activity sorted by monthly license cost. Color-coded by days inactive: red (180+ days), orange (90+ days).

💡

Optimization Insights

Summary card grouping pending recommendations by type (Remove / Downgrade / Upgrade) with user counts and total monthly savings.

AI-Driven

Smart Recommendations. Real Savings.

BEAK analyzes every user's actual usage against their assigned license and generates targeted recommendations with configurable thresholds.

REMOVE

Inactive Users

Users with no detected activity for 90+ days (configurable). Stop paying for licenses nobody uses. Color-coded red — highest cost risk.

Default threshold: 90 days inactivity
DOWNGRADE

Over-Provisioned Users

Users whose mailbox, OneDrive, and Teams usage indicates they could operate effectively on a lower-cost license plan.

Signals: <5 GB mailbox · <1 GB OneDrive · low Teams
UPGRADE

Under-Licensed Users

Users whose usage exceeds what their current license tier supports. An upgrade improves productivity and avoids service degradation.

Color-coded blue — proactive optimization

Usage Score — 0 to 100%

Every user gets a Usage Score calculated from mailbox, OneDrive, SharePoint, and Teams activity. Scores drive recommendation priority.

0–39% — Strong removal/downgrade candidate
40–69% — Moderate usage, may benefit from downgrade
70–100% — Active usage, license is appropriate
Governance

Streamlined License Procurement

From request to fulfillment — a complete approval lifecycle with email-based actions that don't require approvers to log in.

📝

Request

Select company, plan, and quantity. See estimated monthly cost before submitting. Add notes for justification.

📧

Email to Approver

Automated approval email sent instantly with request details, cost, and one-click Approve / Reject buttons.

Approve / Reject

Approvers confirm directly in browser — no login needed. HMAC-secured links valid for 7 days. License pool auto-updated on approval.

🚀

Fulfill

Admin procures licenses in M365 Admin Center, then marks the request as Fulfilled in BEAK. Full status history retained.

License Pools

Each company has a pool per SKU showing Total, Allocated, Available, and Utilization. Bulk allocation lets you assign a license to multiple users at once. Manually allocated licenses can be deallocated with one click.

SKUTotalAllocatedAvailableUtilization
Microsoft 365 Business Premium20018317
Microsoft 365 E31208733
Microsoft 365 F150500
Security

Role-Based Access & Enterprise Security

Built for multi-tenant environments with strict data isolation, MFA, and encrypted credential storage.

Super Admin
  • Full access to all tenants and companies
  • Create and delete tenants
  • Manage system-wide settings
  • Seed plan catalog & pricing data
  • Access Settings page
Tenant Admin
  • Full access within their own tenant
  • Manage companies & M365 configs
  • Approve or reject procurement requests
  • Allocate and deallocate licenses
  • Configure email approvals
Tenant Viewer
  • Read-only access to dashboards
  • View licenses, usage, and recommendations
  • Browse plan catalog & comparisons
  • Cannot modify any data
  • Cannot trigger syncs
🔒

Multi-Factor Authentication

OTP delivered to registered email. 5-minute validity, 5-attempt lockout, resend available.

🔑

Encrypted Credentials

Client secrets and certificates are encrypted at rest. Certificate-based auth supported (.pfx upload).

🛡️

HMAC-Secured Tokens

Email approval links are signed with HMAC and valid for 7 days — no login required for approvers.

🗄️

Multi-Tenant Data Isolation

All data is scoped to the selected tenant. No cross-tenant data leakage by design.

Complete Feature List

Everything Included

No add-ons. No hidden modules. Everything you need to manage, govern, and optimize M365 licenses.

📊 Analysis

  • SKU Summary with utilization
  • Per-user license assignments
  • Organization subscriptions view
  • Mailbox, OneDrive, Teams usage
  • AI usage score (0–100%)
  • Remove / Downgrade / Upgrade recommendations
  • Plan Catalog (Business, Enterprise, F1, Add-ons)
  • Side-by-side plan comparison (up to 4 plans)

🔧 Governance

  • License procurement requests
  • Email-based approvals (no login)
  • License pool management
  • Single and bulk license allocation
  • Deallocation with one click
  • Comprehensive audit log
  • CSV and Excel data export
  • Bulk source classification (MPN / Purchased / Trial)

⚙️ Configuration

  • Azure AD app credential management
  • Client secret or certificate-based auth
  • Partner Center API integration
  • Email (Mail.Send) configuration
  • Configurable recommendation thresholds
  • System-wide settings (Admin)
  • Multi-company per tenant
  • Tenant and company CRUD

🔄 Operations

  • Full sync (licenses + usage + recs)
  • Background sync with Celery/Redis
  • Auto-refresh sync status (3s interval)
  • Sync job history with duration + record count
  • Auto-fail stale jobs (10+ min)
  • Last sync timestamp per config
  • Test connection for M365 & Partner Center
  • Test email configuration
Get Started

Requirements & Setup

BEAK is a web-based SaaS platform. No software installation required — just a browser and Azure AD app credentials.

System Requirements

  • Chrome, Edge, Firefox, or Safari
  • Azure AD App Registration
  • User.Read.All permission
  • Directory.Read.All permission
  • Reports.Read.All permission
  • Organization.Read.All permission
  • Mail.Send (email approvals)
  • Partner Center API (MPN benefits)

First-Time Setup Wizard

1
Organization Details

Tenant name, company name — slugs auto-generated.

2
Admin Account

Full name, email/username, and password (8+ chars).

3
M365 Credentials

Azure Tenant ID, Client ID, and Client Secret.

Complete Setup →