Overe interacts with all the components of 365 that your tenant has the corresponding license for.
For example, to see information about Intune, you'd need either
Microsoft 365 Business Premium, M365 E3/5 or the Microsoft Intune Plan 1 Addon.
Similarly for Defender data, you'd need either Microsoft 365 Business Premium, M365 E3/E5, Microsoft Defender for Business or Microsoft Defender for Endpoint Plan 1.
Licensing applies per user, not per tenant.
Microsoft licences that unlock Conditional Access are consumed per user, not once per tenant. Every user targeted by a Conditional Access policy must individually hold Microsoft 365 Business Premium, M365 E3/E5, or an Entra ID P1 add-on.
Microsoft Entra will not stop you assigning a policy to an unlicensed user, and the policy will apply to them. Doing so does not meet Microsoft’s licensing terms, and Microsoft now surfaces this in the Entra portal. In a mixed tenant — for example Business Standard alongside Business Premium — you are responsible for ensuring policy scope matches entitlement.
See Third-party licensing and policy scope for where this responsibility sits and what to check.
This also maps onto functionality, where licenses will allow us to perform additional actions within your environment.
1) Assess
You will get a complete assessment on all relevant areas of your tenant other than Insight into dormant users which requires M365 E3/E5 or Entra P1 /P2.
We highlight any areas with a licensing deficit ( Intune for example) directly in the scan result.
2) Harden
You are able to use our full suite of policies other than:
Conditional Access Policies: Each user in scope requires Microsoft 365 Business Premium, M365 E3/E5 or an Entra ID P1 Addon / Entra Suite licence. Holding one of these licences somewhere in the tenant is not sufficient — the requirement attaches to every user the policy targets. Users without an eligible licence should be excluded from scope.
Risk Policies: Both Sign-in risk policy / User risk policy require E5, Entra ID P2 Addon or Entra ID Suite.
Any Policies you cannot use appear in the 'Unavailable' Tab.
3) Monitor
We act on all data that we can access regardless of your licensing.
4) Respond
Sessions can be revoked for any user regardless of licensing. Account blocks are enforced through a Conditional Access policy, so any user you block — manually or through Automated Response — must hold Microsoft 365 Business Premium, M365 E3/E5 or an Entra ID P1 Addon / Entra Suite licence. See Overe Response for how to configure this in a mixed-licensing tenant.
Microsoft Licensing can be confusing, so here are a few resources we recommend:
