Entra ID Groups with Licences containing disabled products (plans)

The question it answers: Which group-based licences have service plans switched off, and which plans are they?

Note

Lists each group licence that has at least one disabled service plan, one row per group (all such licences of the group in the column). Licences with every plan enabled are not listed. A plan the SKU no longer lists is shown by its id.

At a glance

Where in the app	Licensing › Groups › Groups Disabled Licence Plans
Workload	Entra ID
Kind	Table
Data	Read from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). It reads through PowerShell (Exchange Online or SharePoint Online), so the first load takes longer than a Graph report.
Licence	Microsoft Entra ID P1 (group-based licensing).
Report id (API and MCP)	entra.groups.disabled-licence-plans

Columns

Column	Key	Type
Display Name	DisplayName	Text
Disabled Plans	AssignedLicenses	Text

What it needs

Licence: Microsoft Entra ID P1 (group-based licensing).

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
Group.Read.All	Microsoft Graph	Read all groups
Organization.Read.All	Microsoft Graph	Read organization information

Data sources it reads

• PowerShell: Get-MgGroup -All -Property Id, DisplayName, AssignedLicenses
• PowerShell: Get-MgSubscribedSku -All (once)

Through the API and MCP

GET /ir-api/v1/reports/entra.groups.disabled-licence-plans?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.groups.disabled-licence-plans. The client needs the Read grant for Entra ID. See Using the API.