---
title: "Tenant overview"
slug: "tenant-overview-in-tenant-manager"
updated: 2026-11-02T06:53:54Z
published: 2026-11-02T06:53:54Z
canonical: "docs.turbo360.com/tenant-overview-in-tenant-manager"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.turbo360.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenant overview

## Overview

The tenant Overview page shows where the paid Microsoft 365 licenses of one tenant stand. It splits paid seats into active, idle, and unassigned, shows what the idle and unassigned seats cost each month, breaks down the tenant's users, and lists what needs your attention first.

The page is read-only. Every figure comes from the last sync of the tenant, and every figure opens the list it was counted from.

### Business value

You see where license spend is wasted and what to fix first, without building a report. Each finding explains its cause and opens the users, licenses, or Microsoft Entra ID groups behind it, so you move from a number to the records in a few clicks.

## Prerequisites

Before you use the Overview page, connect the tenant and let it finish its first sync. Until then, the page shows that nothing has synced yet. See [Connect a Microsoft 365 tenant](https://docs.turbo360.com/docs/connect-a-microsoft-365-tenant) and [Syncing a Microsoft 365 tenant](https://docs.turbo360.com/docs/syncing-a-microsoft-365-tenant).

### Required permissions

You need **Read** on Overview. The **Owner**, **Contributor**, and **Reader** roles include it. Overview has a **Read** level only, so no role needs **Manage** for it. For custom roles, see [Roles and permissions in Tenant Manager](https://docs.turbo360.com/docs/tenant-manager-roles-and-permissions).

### Dependencies

The figures on this page depend on the following.

- **Last sync:** the page shows what the last completed sync read from Microsoft. It is not live. When a sync of the tenant finishes, the page loads the new figures. Each tenant also syncs automatically every 6 hours.
- **Seat prices:** money figures use the seat price from the tenant's Microsoft Customer Agreement (MCA) billing account, or a custom price from the [Global price catalog](https://docs.turbo360.com/docs/global-price-catalog-in-tenant-manager). Licenses with no price are left out of money figures.
- **Directory.Read.All:** this Microsoft Graph permission lets Tenant Manager read licenses, users, and groups. Without it, the sync has nothing to show. Organization.Read.All, User.Read.All, and Group.Read.All together also work.
- **AuditLog.Read.All:** this Microsoft Graph permission lets Tenant Manager read each user's last sign-in. Without it, counts that depend on activity, such as the no-activity finding, can be lower than the real number. Last activity then comes from Microsoft 365 usage reports, which cover only Exchange, SharePoint, Teams, and OneDrive.
- **Reports.Read.All:** optional. It lets Tenant Manager read Microsoft 365 usage reports, which feed last activity and the cheaper-license finding.
- **Application.Read.All:** optional. It lets Tenant Manager read the client secret expiry date automatically, which drives the client secret findings. Without it, you enter the date by hand.

## How it works

The Overview page has four cards: **Licenses**, **Users**, **Top license wastages**, and **Needs attention**. The 90-day line used on this page is fixed. It is separate from the Inactive line that you can set in **Filter settings** on Explore and Optimization. Idle seats use each user's last activity. Last activity is the later of the user's interactive sign-in and their activity in Microsoft 365 usage reports. When usage reports have nothing for the person, Tenant Manager uses the later of the interactive and background sign-ins. A user with no activity on record counts as idle.

### Licenses and Users cards

On the **Licenses** card, a donut chart splits the paid seats of the tenant into three groups. The number in the center is the total of paid seats. Trial licenses aren't counted, and seats assigned beyond what was purchased are left out. The legend shows the number of seats for each group, and the monthly cost of the idle and unassigned seats. Active, Idle, and Unassigned always add up to the number in the center.

| Slice | Meaning | Opens |
| --- | --- | --- |
| Active | A paid seat held by a user who is enabled and had activity within the last 90 days. | Explore > Users |
| Idle | A paid seat held by a user who is disabled or has had no activity for 90 days. | Explore > Users |
| Unassigned | A paid seat that is purchased but not given to any user. | Explore > Licenses |

The **Possible monthly savings** pill adds the monthly cost of the idle and unassigned seats at each license's price. Licenses with no price are left out, so the real figure can be higher. Selecting the pill opens **Optimization** > **Users**.

On the **Users** card, the total of users opens Explore > Users. Three bars split everyone in the tenant, and you can select any number to see those users.

| Bar | Segments | Notes |
| --- | --- | --- |
| Accounts | Enabled, Disabled | A disabled account can't sign in. Any paid seat still assigned to it is billed but not used. |
| Licensing | Licensed, No license assigned | Licensed means the user holds at least one license, paid or trial. No license is normal for guests, shared mailboxes, room accounts, and service accounts, so it isn't a problem on its own. |
| User type | Members, Guests | Members belong to your organization. Guests are external people invited into your directory. |

### Top license wastages

This card lists up to 10 paid licenses with unused seats, ordered by utilization with the lowest first. Each row shows the license, the number of unused seats, and the monthly cost of those seats. The row subtitle shows how many seats are assigned out of the seats purchased. Trial licenses are left out. The cost is the seat price multiplied by the unused seats, and it shows NA when the license has no price. Selecting a row opens Explore > Licenses for that license, and **View all** opens the Unassigned filter.

### Needs attention

This card lists what to act on, most urgent first. Each finding has an urgency label and a count of its items. **Now** means act first, **Soon** means act in the near term, and **Review** means look at it when you can. Hover over a finding to read the advice, or select it to open the list it was counted from.

| Finding | Urgency | What it tells you |
| --- | --- | --- |
| Tenants not syncing | Now | The tenant's sync is failing or disconnected, so the page shows the last successful sync. A sync counts as failing when it logged any issue, not only when it stopped completely. For example, a tenant that is missing only AuditLog.Read.All or RoleManagement.Read.Directory counts as failing. A missing Reports.Read.All or CallRecord-PstnCalls.Read.All does not. A report on a failing tenant is abandoned and nothing is sent, and automation is blocked for it. Fix the connection first. Opens the Tenants page. |
| Client secret expired | Now | The expiry date you entered for the client secret has passed. Syncs stop once Microsoft rejects the secret. Create a new secret in Microsoft Entra ID and update it on the tenant. Opens the Tenants page. |
| Client secret expiring soon | Soon | The client secret expires within 30 days. Create a new secret before it expires so the sync keeps running. Opens the Tenants page. |
| License renews in N days | Soon or Review | A subscription renews or expires soon. It is Soon when the date is under 30 days away, and Review from 30 to 90 days. Decide the seat count before the date. |
| Expired subscriptions | Now | Seats are still assigned on expired subscriptions. Users lose access when the grace period ends, so renew or move them to an active license. |
| Paid seats on disabled accounts | Now | Disabled accounts can't sign in, but their seats are still billed. Removing these licenses is usually the easiest saving. |
| Paid seats with no sign-in for 90 days | Soon | These accounts are still enabled and have had no activity for 90 days, so each removal needs approval. Tell the users first, and remove the licenses after a grace period. |
| Paid license types assigned to nobody | Review | You pay for these subscriptions, but nobody uses them. Consider canceling them at renewal. |
| Unassigned paid seats | Review | Seats are purchased but not assigned. Assign them, or reduce the count at the next renewal. |
| Groups with no owner | Review | Nobody reviews who joins these Microsoft Entra ID groups. If a group gives out licenses, anyone added gets a paid seat. |
| Licensing groups with no members | Review | These Microsoft Entra ID groups assign licenses but have no members. They are often leftover test groups. |
| People who could move to a cheaper license | Review | Optimization lists each person, the license to move to, and why. Opens **Optimization** > **Users**. |
| People with multiple assignments | Review | A license is given more than one way, for example directly and through a Microsoft Entra ID group. No seat is saved, but you can remove the extra assignment. |
| Nothing has synced yet | Now | The tenant has not synced. Seat and user numbers appear after the first sync. |

The multiple-assignments finding leaves out people you excluded from removals, and the cheaper-license finding leaves out recommendations someone chose to ignore. Other findings still count excluded people. The thresholds on this page are fixed in Tenant Manager: 90 days for inactivity, 90 days ahead for renewals, and 30 days for client secret expiry. You can't change them or dismiss a finding.

Amounts show in one currency: the billing currency of your tenants when they all share one, otherwise US dollars, converted at the daily exchange rate.

## Steps

Overview is read-only, so the steps below cover how to open the page and how to follow a figure to its records. You start in the tree view in Tenant Manager.

### Open the tenant overview

This procedure opens the Overview page for one tenant.

1. In the tree view, expand the tenant group that holds the tenant.
2. Select the tenant. Overview is its default page. You can also expand the tenant, expand **License management**, and select **Overview**.
3. Check the page header. It shows **Last synced** with the date and time, or **Never synced**, and a **Sync** button that shows **Syncing** while a sync runs. If the last sync had problems, hover over the warning icon to read them. If you can approve license tasks, you also see an **N awaiting approval** chip.
4. Select the info icon next to the tenant name to read how the figures are counted.

### Open the records behind a figure

This procedure takes you from a figure to the list it was counted from.

1. Select a donut slice or legend row, a segment or key on the **Users** card, the total of users, a row in **Top license wastages**, **View all**, the **Possible monthly savings** pill, or a finding.
2. Review the list that opens. Explore, Optimization, or the Tenants page opens, already filtered to those records. A note at the top of the list names the filter, and you can clear it to see everything. The filter is part of the page address, so you can bookmark or share the link, and it opens the same records after a reload.

## Permission behavior

Overview is read-only for every role, but access to the pages it links to depends on your role.

- Without **Read** on Overview, the **Overview** row is hidden in the tree view. If you open the page by its address, it shows "You do not have access to this page".
- A link on this page opens Explore or Optimization. Those pages check your access on their own, so a link can open a page that your role can't read.

## Example scenario

Grace Mutasa, a module owner at Lucerne Publishing, opens the Overview page of the tenant named Lucerne Publishing HQ before the monthly licensing review.

The **Licenses** card shows 250 paid seats, with 41 idle and 19 unassigned. The **Possible monthly savings** pill adds up what those 60 seats cost each month. **Needs attention** lists "Paid seats on disabled accounts" as Now. She selects that finding, and Explore > Users opens with the disabled accounts that still hold paid seats. She reviews the list and adds the licenses to tasks for approval.

## Limitations

- The page is read-only. You can't change a license or a user from it.
- The page shows the last sync, not live data from Microsoft.
- Findings can't be dismissed, and the thresholds can't be changed.
- You can't export the page, choose the currency, or set a date range.
- Trial licenses aren't counted, and licenses with no price add nothing to money figures.
- A tenant group has its own page. See [Tenant group overview](https://docs.turbo360.com/docs/group-overview-in-tenant-manager).

## Troubleshooting

1. **The cards show "No paid seats yet. Sync a tenant first." or "No user data yet. Sync a tenant first."** Cause: the tenant has not completed a sync, or it has no paid licenses. Fix: run a sync, or wait for the next one. Syncing needs the **Manage tenants** permission. If a first sync is already running, the cards say "The first sync is running. Seats appear when it finishes." Wait for it to finish. The page reloads by itself.
2. **Monthly cost shows a dash or NA.** Cause: the license has no known price. Fix: ask the Turbo360 account owner or a module owner to set a custom price in the Global price catalog, or connect an MCA billing account that gives the connection the Billing account reader role.
3. **A banner says that Turbo360 couldn't read the stored data for people, licenses and prices, groups, or tenants.** Cause: one of the reads behind the page failed, so the figures may be incomplete. A new sync doesn't help, because the data comes from the last sync. Fix: follow the advice in the banner. It tells you to reload the page, check your connection, or ask a module owner to check your role and scope. If the page keeps failing after a reload, contact support with the time it happened.
4. **The count for "no sign-in" findings looks too low.** Cause: the connection doesn't have the AuditLog.Read.All permission, so activity can't be read. Fix: grant the permission with admin consent on the app registration, and then sync the tenant.
5. **The page shows "You do not have access to this page".** Cause: your role doesn't include **Read** on Overview. Fix: ask an administrator who can manage Tenant Manager access, such as a module owner, to add it.

## FAQs

1. **How is an idle seat here different from the Inactive filter in Explore?** Overview counts a seat as idle when the user is disabled or has had no activity for 90 days, based on last activity. That line is fixed. The Inactive filter in Explore and Optimization uses a line that you choose in **Filter settings**, and the default is 30 days.
2. **Does selecting a finding change anything?** No. It opens the list the finding was counted from. Changes are made as tasks in Optimization and need approval.
3. **Why do some users have no license?** Guests, shared mailboxes, room accounts, and service accounts often have none. That is normal and isn't counted as waste.

## Related articles

- [What is Tenant Manager?](https://docs.turbo360.com/docs/what-is-tenant-manager)
- [Understanding tenant groups](https://docs.turbo360.com/docs/understanding-groups-and-tenants)
- [How data sync works](https://docs.turbo360.com/docs/how-data-sync-works)
- [Tenant group overview](https://docs.turbo360.com/docs/group-overview-in-tenant-manager)
- [Explore users](https://docs.turbo360.com/docs/explore-users-in-tenant-manager)
- [Explore licenses](https://docs.turbo360.com/docs/explore-licenses-in-tenant-manager)
- [Recommendations and savings](https://docs.turbo360.com/docs/recommendations-and-savings)
- [Syncing a Microsoft 365 tenant](https://docs.turbo360.com/docs/syncing-a-microsoft-365-tenant)
- [Roles and permissions in Tenant Manager](https://docs.turbo360.com/docs/tenant-manager-roles-and-permissions)
- [Optimization overview](https://docs.turbo360.com/docs/optimization-overview-in-tenant-manager)
- [Limits and defaults](https://docs.turbo360.com/docs/limits-and-defaults-in-tenant-manager)