In order to make sure licence consumption is in line with the expected, a report that can look to D365 set security and marry that up with security coming from AAD would be very helpful - both from a full licence overview, but also from a Sysadmin normal trouble shooting when users are not seeing expected behavior in D365.