Health check
Vestholm Gruppen · 20 Aug 2026, 09:14 · Report VL-2608-0114
Nothing here is a mistake anyone made. This is what accumulates when identity work is done by hand.
66
/ 100
Needs attention
- Identity lifecycle
- 19 / 30
- Privileged access
- 14 / 25
- Licenses and cost
- 13 / 20
- Devices
- 12 / 15
- Data quality
- 8 / 10
22 points recoverable by closing the 5 critical findings · how the weighting works
5
Critical findings
CRITICAL
9
Standing privileges
CRITICAL
23
Unused licenses
$1,180/MO
41
Stale devices
MEDIUM
9
Data quality issues
MEDIUM
Read: 412 identities · 968 devices · 187 groups · 34 guests · 18 companies · 7 countries · 2,411,806 sign-in events
Top findings
4 of the 22 checks could not be evaluated — we fell back to inactivity, a weaker signal.
Method and data14 of 18 findings can be closed as approved orders in Entra Logic.
4 need a decision only someone in your organisation can make.
Not evaluated
Checked and did not find
No accounts with passwords set to never expire — checked 412 users
No groups nested more than two levels deep — checked 187 groups
No devices running unsupported operating system versions — checked 968 devices
No guest accounts holding privileged roles — checked 34 guests
Economics
- Recoverable license spend
- $14,160 / year
- Entra Logic at 412 identities
- $44,496 / year
License recovery covers about a third of the platform. The rest is the offboarding work that stops being manual, and the standing privileges that stop being carried.
The 6 leaving-date accounts alone hold 94 group memberships, licenses, devices and mailbox delegations. Closed by hand that is 94 changes plus an approval trail assembled afterwards.
By category
Identity lifecycle
Privileged access
Licenses and cost
Devices
Sample report. Fictional group, fictional data.