to do a user access cleanup, there is no report found to show the actual utilization of Roles by the user.

In other words, the License required is derived from the context \ Resource used under the Role. In some cases, the Role is assigned to user, but the user does not actually utilize these resources. The report mentioned below, “User License Estimator” is based on the Roles as a whole and not the actual usage/utilization.

Hope there would be a report where we can get to know the actual Roles, and Role Permissions are utilized so we can do the cleanup and that would assist as well in knowing the actual Licenses required. it is important to ensure that the actual required licenses are the ones assigned.