When running Microsoft 365 Security Inspections, ConnectSecure should identify the licenses assigned within the tenant and compare them against the licensing requirements for each security finding.

Many remediation recommendations require specific Microsoft licensing such as Microsoft Defender for Office 365, Entra ID P1/P2, Intune, or Purview. Today, engineers must manually determine whether a finding can actually be remediated with the customer's existing licenses.

Requested enhancements:

Detect and inventory Microsoft licensing during the assessment.

Map each finding to its minimum licensing requirement.

Indicate whether the remediation is:

Available with current licensing

Requires a license upgrade

Not available due to licensing limitations

Add report filters for:

Remediable Findings

License-Constrained Findings

License Upgrade Opportunities

Example:

Safe Links Not Enabled Current License: Business Standard Required License: Defender for Office 365 P1 Status: Requires License Upgrade

This would allow engineers to focus on actionable remediation items and provide customers with more accurate security guidance.

Additionally, provide a customer-facing Risk Acceptance report that allows findings to be marked as:

Remediated

Scheduled for Remediation

Requires License Upgrade

Accepted Risk

The report should allow customer acknowledgment of risks that cannot be remediated due to budget, operational requirements, or licensing constraints.

This information should also be available within compliance reporting so MSPs can document:

Findings identified

Required licensing

Recommended remediation

Customer decisions

Accepted risks

Compensating controls

This would create a stronger audit trail for compliance frameworks, cyber insurance reviews, security assessments, and vCIO/QBR discussions while reducing engineering effort spent researching licensing requirements and explaining why certain recommendations cannot be implemented.