User.Read.All
Organization.Read.All
— application permissions, granted to the app registration with admin consent.
Endpoints:
GET /v1.0/users?$select=assignedLicenses,licenseAssignmentStates · GET /v1.0/subscribedSkus
Services disabled on a user's licence are taken into account. Plans that ship in almost every SKU (Exchange Foundation, Microsoft Search, ...) are ignored.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Overlapping & Duplicate Licence Assignments
Users who hold two licences where one already contains everything the other provides - Office 365 E3 on top of Microsoft 365 E3, Exchange Online Plan 1 next to a suite that includes Exchange. The Redundant rows are licences you can usually remove without the user losing anything.
No user holds a licence whose services another of their licences already provides.