Shadow SKUs & orphaned assignments

Find cost leaks that are not obvious from a quick admin-centre glance.

Problem

Over years, organisations accumulate group-based assignments, pilot SKUs and special accounts. Orphaned licences on disabled accounts, duplicate add-ons or expensive bundles for shared-mailbox-only scenarios are typical. Without structured signals they stay hidden until the next hard budget cut.

Approach with CHAOS

CHAOS correlates identity status, group membership, SKU assignments and usage hints. Rules flag cleanup candidates; each recommendation includes rationale and risk flags. Approvals govern whether automation or manual cleanup runs.

Outcome from CHAOS

Prioritised cleanup list with expected savings and reduced compliance risk. Fewer “we still have licences somewhere” debates.

Insight

Shadow SKUs come from process gaps, not malice. After cleanup, fix onboarding/group ownership—otherwise the shadow returns immediately.