Tensor AIPurchase to your first saving in ten minutes.
Welcome. This guide takes you from Azure Marketplace purchase to the moment your Microsoft 365 licence inventory, forecast spend and first rightsizing recommendations land on your dashboard.
Before you start
You need a Microsoft 365 admin account with the Global Administrator or Privileged Role Administrator role. It is required for the one-time consent that lets LicenseGuard read your licence inventory and — with your approval — remove or reassign licences on your behalf.
1 · Subscribe on Azure Marketplace
Open the LicenseGuard listing, click Get it now, sign in with your Microsoft 365 admin, pick a plan, and confirm. Azure redirects you to our landing page.
| Plan | Includes | Price | Trial |
|---|---|---|---|
| Starter | Up to 100 users, full remediation & audit | £29 / month | 14 days free |
| Professional | Up to 500 users, RBAC with separation of duties | £79 / month | 14 days free |
| Enterprise | Unlimited users, scheduled rightsizing (private preview) | £149 / month | 14 days free |
2 · Activate
On the landing page you will see your plan and monthly total. Enter your contact email and company name, then click Activate & grant admin consent. Microsoft will show you the permissions LicenseGuard needs:
Directory.Read.All,User.Read.All,Group.Read.All— read who has which licencesOrganization.Read.All— read your subscribed SKUs and seat countsReports.Read.All— read the D30 usage reports that power inactivity detectionAuditLog.Read.All— read last sign-in as a fallback activity signalDirectory.ReadWrite.All— remove or add licence assignments when you approve an action in-app
3 · Wait for the first sync
LicenseGuard runs a full sync on boot and then nightly at 02:15 UTC. Within a couple of minutes of activation your dashboard shows the licence inventory and spend forecast in GBP against the July 2026 price sheet. The D30 usage reports lag Graph by about 48 hours, so the first inactivity-based recommendations arrive on day 2 or 3.
4 · Review recommendations
Left nav → Recommendations. Sorted by monthly saving in GBP. Each row shows the user, the SKU, and the evidence — last activity date, days inactive, and whether the assignment is direct or inherited from a group. Two actions per row:
- Propose removal — creates a pending action. A different admin then approves it in the Actions page (separation of duties on Professional and Enterprise plans).
- Dismiss — you are happy with the assignment. LicenseGuard suppresses that recommendation until a future sync raises it with different evidence.
5 · Approve and execute
Left nav → Actions. Approve a proposal to hand it to LicenseGuard. Our worker drains the action queue every hour and runs approved changes through Microsoft Graph. Each executed action captures the before-state, so if you need to reverse it, hit Rollback — LicenseGuard re-adds the licence with the same disabled-plan configuration.
Roles
| Role | Can do |
|---|---|
| Viewer | Dashboard, licences, recommendations, audit log. |
| Approver | Everything Viewer sees, plus propose, approve, and cancel actions. |
| Executor | Everything Approver sees, plus rollback of executed actions. |
| Owner | Implicit superset. Every publisher-consent admin starts as Owner. |
By default any user in your tenant who signs in gets viewer. Assign the other roles in-app under Settings → Users, or via API.
Common questions
Where is my data stored? Azure UK South only. Nothing leaves the UK region in normal operation.
How long is data kept? Recommendations and actions are retained for the life of the subscription. The append-only audit log is retained for the life of the subscription. Raw usage-signal history is kept for 12 months.
How does billing work? Azure bills you a flat monthly plan fee. It counts toward your MACC. Change plan in the Azure portal and LicenseGuard picks up the new plan within an hour.
How do I cancel? Unsubscribe in the Azure portal. Sync stops within the hour. Data is deleted 30 days after cancellation.
Adding more admins. Any user in your M365 tenant who signs in at /app gets a Viewer account automatically. Owners promote them from Settings → Users.
Does anything ever change my tenant without me? No. Every licence write is gated on an in-app approval, is executed under a named admin's approval, and is captured with its before-state.
Help
Email support@tensorsoftai.io. Response times are on the support page. Live status at licenseguard.tensorsoftai.io/healthz.