What Microsoft 365 Licenses Should a Business Remove When Employees Leave? Secure the account first and recover their work access only after you decide what must happen to their mailbox, OneDrive files, and any compliance holds. Then remove the former employee’s individual Microsoft 365 licenses when those dependencies are handled. And reassign the seats to replacement staff or reduce the subscription quantity if the seats are no longer needed. The license itself is not an offboarding checklist: removing it is different from blocking sign-in or deleting the account, and each choice can affect data access.
Microsoft’s guidance is to prevent sign-in, preserve or transfer relevant email and files, and review legal or retention obligations before deleting the account or changing its licensing. Some resources, such as a shared mailbox, may remain in use without the former employee’s personal license. While others require a license to retain certain features or legal holds. The safe answer is to reclaim only licenses attached to the leaver after you verify what each one supports and document who owns the remaining data.
Talk with IGTech365 about Microsoft 365 licensing and user offboarding.
What Should You Remove First When an Employee Leaves?
Start with access, not billing. Microsoft recommends resetting the departing user’s password and signing out active sessions; when necessary, block sign-in as well. A license can still be assigned while access is being secured, so unassigning a subscription should not be treated as the only way to prevent access. Microsoft’s account-removal workflow separates securing the account, protecting data, and removing the license for that reason. Read Microsoft’s sign-in and access steps.
Separate access controls from the license
For a planned departure, coordinate with the employee’s manager and HR so access changes occur at the approved separation time. Reset the password, revoke sessions, and block sign-in according to the organization’s process. Then remove the user’s access to business applications, groups, privileged roles, remote access, and managed devices where applicable. Review mailbox delegation, shared credentials, API keys, and third-party tools separately. A Microsoft 365 license does not automatically document or remove access granted through every connected service.
For an involuntary or higher-risk separation, the timing and order may need to be immediate and coordinated across IT, HR, and management. CISA documents a case in which a threat actor used a former employee’s compromised account to reach an organization’s network. And advises removing accounts that are no longer needed. Treat that as a reason to run a dependable access process, not as a reason to skip approval or data-protection steps. CISA’s former-employee account advisory also emphasizes MFA and secure credential handling.
Do not confuse license removal with account deletion
Unassigning a license, blocking sign-in, and deleting a user account are distinct actions with different consequences. Keep the account available as long as required to preserve access to email, files, or a shared mailbox. Before deleting it, review the organization’s retention policy and any legal hold with the responsible compliance or legal owner. This guide focuses on the license decision after those access and preservation decisions are made.
For a broader account and application review, see IGTech365’s employee offboarding IT checklist; this article concentrates on the Microsoft 365 license and the data dependencies that affect when to reclaim it.
What Microsoft 365 Licenses Should a Business Remove When Employees Leave?
In most employee departures, review the Microsoft 365 user licenses assigned to that person, including the base plan and any separately assigned service licenses. The license to remove is not a particular plan name that applies to every leaver. It is the former employee’s individual seat after you confirm that no mailbox, archive, retention, device, or other workload requirement still depends on it. If a replacement employee needs the same plan, the seat can be reassigned. If nobody needs it, an administrator can remove the seat from the subscription under the applicable billing terms.
| Option | Action |
|---|---|
| Reassign | Transfer a cleared seat to a replacement user |
Check the services, not just the plan label
Before changing a license, note which services are enabled for the departing user. Check Exchange email and calendar, OneDrive, Teams, device management, security or compliance features, and separate add-ons. Identify separately assigned add-ons as well as the bundled plan. Your replacement may need a different combination based on role, security needs, and device requirements; do not copy the old bundle automatically. IGTech365’s explainers on Defender features by license and Intune and device management licenses cover those plan differences.
For a user whose account will be deleted and whose license is no longer required, Microsoft says the license can be unassigned and made available for another user. Its admin-center instructions are straightforward: open Users > Active users, select the former employee, open Licenses and Apps, clear the relevant license checkboxes, and save. But do this after confirming the data and retention plan, not as the first offboarding action.
Reassign or reduce the subscription?
Reassign a recovered seat when a new or existing employee needs that license. If hiring is not planned and you want to lower the number of seats purchased, Microsoft provides a separate subscription quantity change in Billing > Your products. Confirm the current agreement’s timing and rules before reducing the quantity. Do not assume removing an assignment from one user also reduces the number of licenses on the subscription; these are separate admin actions. Microsoft also notes that removing a license can release an associated PSTN phone number and may affect call-queue membership, so check voice services when the account has them.
Because Microsoft plans and service entitlements change, verify the exact features assigned in the tenant before you make a plan-specific decision. For a renewal-wide assessment of underused subscriptions, use the existing Microsoft 365 licensing review; this guide stays focused on the departing user’s seat.
What Must You Preserve Before Removing a License?
Decide who needs the former employee’s email, calendar, and files before changing the license or deleting the account. Microsoft distinguishes removing a license from deleting the user. Its current instructions describe a 30-day recovery window for certain mailbox and OneDrive content after account deletion. While OneDrive data can remain accessible beyond 30 days when the account has not been deleted. Do not treat that window as a complete backup or a universal retention rule. Review the tenant’s retention settings and your organization’s legal obligations first. Microsoft’s OneDrive and Outlook handoff steps explain options for granting another user access.
Keep email available when the business needs it
If a colleague needs the departing person’s mailbox and calendar, an administrator may convert it to a shared mailbox or arrange forwarding. Microsoft says a shared mailbox can retain existing email and calendar; forwarding sends new mail and does not replace access to historical messages. When forwarding or a shared mailbox is in place, Microsoft cautions not to delete the former employee’s account because the account remains the anchor for those functions.
A shared mailbox under 50 GB may not require a license under Microsoft’s current guidance, but one over 50 GB does. Additional features or compliance needs can change the licensing requirement, so check the mailbox configuration rather than assuming every converted mailbox is unlicensed. See Microsoft’s mailbox conversion and forwarding guidance.
Transfer OneDrive files and flag holds
Identify business files that need to move to a manager, replacement, or shared SharePoint location. Microsoft provides ways to grant access to the former user’s OneDrive and move or copy files; document who now owns each retained work area. If the person has a legal hold, investigation, or retention obligation, stop before removing a license or deleting the account. Microsoft’s license-removal instructions warn that holds must be addressed first and specify license requirements for some eDiscovery hold scenarios. The exact license depends on the retention design and service configuration.
For longer-term email preservation, an inactive mailbox is a separate compliance approach that requires a hold to be applied before the account is deleted. Work with the organization’s compliance or legal owner to confirm the policy, eligible license, and sequence. Microsoft’s inactive mailbox guidance details that process. For broader protection beyond default service retention, review your Microsoft 365 backup and recovery plan.
How Do You Remove and Reassign a License Safely?
Use a sequence that protects access and data before reclaiming the seat. Assign the work to an administrator with an appropriate role, and follow your organization’s HR, security, and retention procedures.
- Confirm the separation and timing. Coordinate with HR and the manager on when access should end. Whether the departure presents an elevated security concern, and who will own the employee’s open work and shared accounts.
- Secure sign-in. Reset credentials, sign the user out of active sessions, and block sign-in as required. Remove access to apps, groups, privileged roles, VPN, and third-party systems separately.
- Inventory the assigned licenses and services. Review the base Microsoft 365 plan and any separate add-ons. Note Exchange, OneDrive, Teams, device-management, voice, archive, security, and compliance dependencies that may continue after departure.
- Preserve required business data. Transfer OneDrive files and decide whether email needs a shared mailbox, forwarding, export, or another approved retention method. Check legal holds and compliance requirements before unassigning the license or deleting the account.
- Remove only the licenses no longer needed. In the Microsoft 365 admin center, go to Users > Active users, select the person. Open Licenses and Apps, clear the licenses you have approved for removal, and save. Confirm any shared mailbox or hold still has the necessary licensing.
- Reassign or reduce the subscription carefully. Reassign a license to a replacement if appropriate. If the organization no longer needs that seat, review the subscription quantity and billing terms separately before reducing purchased licenses.
- Record and verify. Document the date, removed and retained licenses, mailbox and OneDrive owner, any hold, and the approver. Confirm the account remains blocked and that intended delegates can access transferred work.
This process is a decision guide, not legal advice. Where retention, eDiscovery, or regulated records are involved, consult the organization’s legal or compliance owner before deleting accounts or changing license assignments. For managed help with Microsoft 365 administration and ongoing license reviews, visit IGTech365’s managed IT services.
Call IGTech365 at (866) 365-7798 for Microsoft 365 administration support.
FAQs About Removing a Former Employee’s Microsoft 365 License
How do I remove licenses from Microsoft 365?
In the Microsoft 365 admin center, go to Users > Active users. Select the former employee, open Licenses and Apps, clear the license assignments approved for removal, and save. First confirm data, mailbox, and compliance requirements.
What happens when you remove a license in Office 365?
The effect depends on the services and whether the account is also deleted. Microsoft’s guidance describes limited recovery periods for some mailbox and OneDrive content after account deletion. So confirm the exact data-retention scenario and preserve what the organization needs before removing a license.
How do I remove a terminated employee’s Outlook account?
Secure sign-in and sessions first. Then decide whether to preserve the mailbox, convert it to a shared mailbox, forward new email, export data, or retain it under a legal hold. Do not delete the account while shared mailbox or forwarding functions still depend on it.
What is the Microsoft license removal tool?
For a single user, use the Microsoft 365 admin center’s Licenses and Apps controls. Administrators can also manage assignments through supported admin tools, but verify the user’s mailbox, OneDrive, and compliance dependencies before changing them.
Talk with IGTech365 about your Microsoft 365 licensing and offboarding process.
Review Your Microsoft 365 Offboarding Process
Removing a former employee’s license can free a seat for a replacement, but timing matters. Secure the account first, verify what email and files must remain available, and check holds before changing the license or deleting the user. IGTech365 can help your business review Microsoft 365 licensing and ongoing administration without guessing at which services a departing employee still supports.
Explore Microsoft 365 licensing support from IGTech365.
Call (866) 365-7798 to discuss your Microsoft 365 offboarding needs.