Security review - Licensing plans

The licensing plans in use will define the level of logs available. For instance, MailItemsAccessed mail access events will only be available for users associated to an Office 365 E5 or Microsoft 365 E5 license.

# List the license plans in the tenant.
Get-MsolAccountSku

# Retrieves the license plans associated with the specified user.
Get-MsolUser -UserPrincipalName <EMAIL> | Select-Object DisplayName -ExpandProperty Licenses

The license plans in use, and their associated users, can also be visualized from the Microsoft 365 admin center.