Article image

Managing SaaS Seat Sprawl: Auditing Client Google Workspace and Microsoft 365 Licenses

For digital agencies, MSPs, and web development firms, providing full-service technology solutions often means managing baseline IT infrastructure on behalf of clients. Reselling or managing tenant accounts for enterprise productivity suites like Google Workspace and Microsoft 365 is a common strategy to increase Monthly Recurring Revenue (MRR) and build long-term client retention.

However, behind this convenience lies a silent profit killer: SaaS seat sprawl.

When an agency manages dozens of client accounts, tracking the active workforce of every single client becomes an operational bottleneck. Employees are hired, promoted, shifted to contractor roles, or fired — yet the software licenses provisioned for them often remain active indefinitely. Because Google Workspace and Microsoft 365 charge on a per-user, per-month commitment model, agencies routinely pay out-of-pocket for "ghost licenses" assigned to departed client staff.

This guide breaks down the financial mechanics of license sprawl, how to run a rigorous license audit, why Microsoft's mid-2026 pricing changes raise the stakes, and how to centralize your IT portfolio using InstaRenewal.

1. The Anatomy of SaaS Seat Sprawl in Client Management

SaaS seat sprawl refers to the unmanaged accumulation of paid software licenses across an organization or portfolio. When an agency acts as the Cloud Solution Provider (CSP) or central billing contact for a client, seat sprawl directly erodes the agency's net profit margin.

The Mechanics of the "Ghost License"

Consider a typical agency managing 20 client accounts, averaging 25 seats per client. Across the portfolio, that represents 500 individual licenses.

[Client HR Fires Employee]
          │
          ▼ (Lacks Offboarding Checklist)
[Email Account Disabled in Console]
          │
          ▼ (Misses License Deprovisioning)
[Paid Seat Remains Assigned/Active]
          │
          ▼
[Agency Invoiced Monthly by Vendor] ────► [Agency Bleeds Profit Margin]

The process unfolds through a predictable operational breakdown:

  • Incomplete offboarding. A client's HR team offboards an employee and asks the agency to disable the user's email access to secure the account.
  • Account vs. license confusion. The agency's helpdesk suspends the user account or changes the password, but fails to revoke or delete the underlying paid license within the Google Admin Console or Microsoft 365 Admin Center.
  • Unbilled overhead. The cloud vendor continues invoicing the agency for the assigned license. Because agency billing is often tied to static client retainer agreements rather than dynamic monthly seat audits, the agency absorbs the cost of the unused seat.

Current published rates give a clear sense of scale. Google's official pricing page lists Business Starter at $7/user/month, Business Standard at $14, and Business Plus at $22 on annual commitment (roughly 17–20% more on flexible monthly billing). Microsoft's Business plans, after the commercial price update that took effect July 1, 2026, run from $7/user/month on Business Basic to $14 on Business Standard and $22 on Business Premium, also on annual commitment.

Run the math on the scenario above: two orphaned seats per client across a 20-client portfolio is 40 ghost licenses. At the low end of either platform's pricing ($7/user/month), that's roughly $3,360 a year in pure, unrecoverable loss. At the top end of the Business tiers ($22/user/month), it climbs past $10,500 a year — before accounting for larger portfolios, higher seat counts, or add-ons like Copilot or Vault.

2. Conducting a SaaS Seat Sprawl Audit: Step-by-Step

To reclaim lost revenue and ensure clean billing across your client base, your team must perform a systematic SaaS seat sprawl audit.

Step 1: Export Active License vs. Active User Datasets

Never rely on client headcount estimates. Log into each client's admin panel or use partner multi-tenant dashboards to pull raw user data.

  • Google Workspace: Navigate to Admin Console > Users. Filter by "Suspended users." A suspended user in Google Workspace still consumes a paid license unless the license is explicitly unassigned or the user object is deleted.
  • Microsoft 365: Navigate to Microsoft 365 Admin Center > Users > Active Users. Filter by "Unlicensed users" versus "Licensed users," and check Billing > Licenses to compare total purchased licenses against assigned licenses.

Step 2: Identify Dormant and Orphaned Accounts

Cross-reference active, paid licenses against actual usage data over the last 30 to 90 days.

  • Dormant accounts. Look for users who have not logged in, sent an email, or opened a Teams/Docs session in over 30 days. These often represent former employees, temporary contractors, or redundant test accounts.
  • Shared mailboxes consuming paid licenses. In Microsoft 365, a shared mailbox is free and license-exempt up to 50 GB of storage, per Microsoft's own admin documentation — a license is only required if it exceeds 50 GB, needs in-place archiving, is placed on litigation hold, or has direct sign-in enabled. Convert a former employee's mailbox to a shared mailbox before revoking their license. In Google Workspace, evaluate whether an inactive account can move to an Archived User (AU) license instead. Google doesn't publish an official AU rate card, but independent estimates and reseller reporting generally put it in the $2–$7/user/month range depending on the departed employee's original license tier — still real money at scale, but a fraction of an active seat.

Step 3: Audit SKU Tiers and Over-Provisioning

Not every employee requires an enterprise-level plan. A major cause of seat sprawl is uniform tier assignment — giving every user a top-tier license regardless of job role.

User PersonaTypical Over-ProvisioningRecommended License Tier
Deskless / frontline staffAssigned Microsoft 365 Business Premium ($22/user/month)Downgrade to Microsoft 365 F3 (~$10/user/month as of the July 2026 update) or Business Basic ($7/user/month)
Basic email usersAssigned Google Workspace Business Plus ($22/user/month)Downgrade to Google Workspace Business Starter ($7/user/month)
Former / offboarded staffFull active license kept for data retentionConvert to Shared Mailbox (M365, free ≤50 GB) or Archived User SKU (Google, ~$2–$7/user/month)

3. Why This Audit Matters More After Microsoft's July 2026 Price Update

Microsoft raised commercial list pricing across Business, Enterprise, and Frontline plans effective July 1, 2026 — its first broad increase to the small-business tiers since 2022. Business Basic rose about 17%, from $6 to $7/user/month. Business Standard rose 12%, from $12.50 to $14. Business Premium held flat at $22, which narrows the gap between Standard and Premium from $9.50 to $8/user/month — worth revisiting if your clients dismissed Premium's security features as too expensive a year ago. The increase applies to new subscriptions and renewals signed on or after July 1, 2026; existing subscriptions keep their prior pricing until their next renewal event. In exchange, Microsoft added roughly 50 GB of extra mailbox storage and expanded Copilot Chat access to Basic and Standard plans, and bundled Defender for Office 365 Plan 1 into Business Premium and E3.

The practical takeaway for agencies: every ghost license just got more expensive to carry, and every client tenant renewing after July 1, 2026 is a natural checkpoint to run the audit in Step 1 before the new rate applies to a seat count nobody has verified in months.

4. Operational Best Practices: Moving Beyond Reactive Audits

Performing a one-time audit stops immediate cash flow leaks, but maintaining high profit margins requires ongoing operational governance.

Implement a Strict Offboarding SOP

Establish a mandatory standard operating procedure (SOP) for client offboarding requests. The checklist must explicitly separate account security from license management:

  1. Block account sign-in and revoke active tokens.
  2. Back up or transfer file ownership (Google Drive / OneDrive).
  3. Convert the mailbox to a shared or archived state if historical data must be preserved.
  4. Unassign and reduce the license count in the tenant billing console.
  5. Update the client's billing profile in your management platform.

Standardize Client License Reselling Agreements

When reselling email hosting, ensure your client contracts explicitly state how seat adjustments are handled. Transition clients away from flat-rate retainers toward dynamic billing models where additional seats requested by client managers are automatically reflected on the next monthly invoice — and where a quarterly true-down review is built into the contract, not left to memory.

5. Keeping the Subscription Itself on Your Radar with InstaRenewal

The audit steps above happen inside Google's and Microsoft's own admin consoles — that's where seat-level suspension, license assignment, and usage data actually live, and no third-party tracker replaces that. Where agencies lose visibility is one level up: knowing which client tenants exist, when each subscription's commitment term renews, who's contractually on the hook for the bill, and whether last quarter's seat count was ever checked at all.

That's the gap InstaRenewal is built to close. It's a renewal-date and ownership record-keeping tool for agency asset portfolios — domains, SSL certificates, hosting accounts, plugin licenses, and other recurring software subscriptions — not a live monitoring system or an identity and access management platform. It doesn't connect to the Google Admin Console or Microsoft 365 Admin Center APIs to pull real-time seat counts, and it doesn't store tenant passwords or admin credentials.

What it does let you do is log each client's Google Workspace or Microsoft 365 tenant as a tracked subscription record alongside the rest of that client's stack:

  • Commitment term reminders. Record the annual or flexible commitment renewal date so you get a reminder before the tenant auto-renews into another 12-month term — giving you a scheduled checkpoint to run the true-down audit from Step 1 first.
  • Billing responsibility field. Tag whether the subscription is billed directly to the client or resold through the agency, so unbilled ghost seats don't disappear into an ambiguous retainer.
  • Manual seat count and tier notes. Record the plan tier and the seat count from your last audit as a field on the asset, so the number you're actually paying for sits next to the renewal date instead of buried in a separate reseller portal.
  • One consolidated client view. See the Workspace or M365 subscription next to that client's domains, SSL certificates, hosting, and plugin licenses in a single record, instead of piecing the client's full footprint together across several logins.

Reclaiming Your Operating Margins

Managing enterprise productivity suites for clients should be a predictable, high-margin line of business. When allowed to run unmonitored, SaaS seat sprawl quietly eats away at your firm's profitability through unbilled overhead and forgotten user licenses — and Microsoft's July 2026 price increase means that overhead now costs more per seat than it did a year ago.

By conducting regular license audits directly in the Google Admin Console and Microsoft 365 Admin Center, enforcing strict offboarding workflows, and using InstaRenewal to keep each client's subscription renewal date, billing responsibility, and last-known seat count on record, your agency can eliminate ghost licenses, protect its bottom line, and deliver efficient IT management services.