--- title: "Persona-Based Licensing: Cut Endpoint Spend by 42%" description: Most organisations license every user the same way. Modelling for 2,000 users shows persona-based licensing cuts spend from AU$2.93M to AU$1.70M. image: https://www.cxanz.com/hubfs/FIL_CX_GEO_Blog%203%20-%20Nov%2026.jpeg --- [![CXANX+Citrix LockUp Black](https://www.cxanz.com/hs-fs/hubfs/CXANX+Citrix%20LockUp%20Black.png?width=300&height=40&name=CXANX+Citrix%20LockUp%20Black.png "CXANX+Citrix LockUp Black")](https://www.cxanz.com/) [![CXANZ+Citrix LockUp Black RGB](https://www.cxanz.com/hubfs/Australia/Projects/CXANZ/AUS-HSM-CXANZ/Brand%20Assets/CXANZ+Citrix%20LockUp%20Black%20RGB.svg "CXANZ+Citrix LockUp Black RGB")](https://www.cxanz.com/) - [Home](https://www.cxanz.com) - [Partners](https://www.cxanz.com/partners) - [Customers](https://www.cxanz.com/customers) - [Blog](https://www.cxanz.com/blog) - Resources - [Find a Partner](https://www.cxanz.com/psp-partners) - [Contact Us](https://www.cxanz.com/meet-the-team) - [Home](https://www.cxanz.com) - [Partners](https://www.cxanz.com/partners) - [Customers](https://www.cxanz.com/customers) - [Blog](https://www.cxanz.com/blog) - Resources - [Find a Partner](https://www.cxanz.com/psp-partners) - [Contact Us](https://www.cxanz.com/meet-the-team) # Extending Device Life Without Extending Risk By [**Roshantha Pillay**](https://www.cxanz.com/blog/author/roshantha-pillay) on Oct 28, 2026, 3:57:18 PM ![\Extending Device Life Without Extending Risk\](https://www.cxanz.com/hs-fs/hubfs/FIL_CX_GEO_Blog%203%20-%20Nov%2026.jpeg?width=7133&height=4755&name=FIL_CX_GEO_Blog%203%20-%20Nov%2026.jpeg) Most organisations license every employee the same way and deploy the same endpoint management and security stack to every device. It's simple to administer, but that simplicity often ends up costing more. The challenge is that two very different decisions are usually bundled together: what people need to do their jobs, and what technology is required to secure the devices they use. They're not the same thing. When every user is treated identically, organisations often end up paying for capabilities that some employees simply don't need. A better approach starts by grouping people according to how they work. Most organisations can settle on three or four distinct user profiles rather than one: employees handling sensitive data, knowledge workers using a standard application set, or task-based users accessing a handful of web applications from a shared device. Each group has different requirements. That means they're likely to benefit from different licensing models, security controls and endpoint strategies. This is the principle behind persona-based licensing: matching technology investments to actual user needs rather than applying the same model to everyone. ## The Four Layers of Endpoint Spend Endpoint spend falls into four layers. 1. Identity and productivity. Identity providers, productivity applications, the operating system and unified endpoint management. 2. Secure access. Adaptive access, session control, data exfiltration prevention, endpoint analytics, web and SaaS control, and web application, bot and API protection. 3. The managed device. Endpoint detection and response, endpoint data loss prevention, patch and configuration management, endpoint privilege management, asset inventory and disk encryption. 4. Compliance and governance. Sensitivity labels, eDiscovery, insider risk and records management. A discipline of its own, served by Microsoft Purview, OneTrust, BigID and equivalents. The first layer is largely dictated by how people work. The fourth is driven by regulatory, legal and governance requirements. The biggest opportunity for optimisation sits in the middle two layers. That's because organisations often apply the same secure access controls and endpoint management stack to every user, regardless of risk, role or working pattern. In practice, not every employee needs the same controls, and not every device needs to be managed in the same way. That's where persona-based licensing and alternative endpoint models, such as Citrix UniconOS, can significantly reduce cost and complexity without compromising security. ### Secure Access These capabilities can be delivered by premium security tooling, typically Microsoft 365 E5 with add-ons, or by the Citrix platform under a Universal Hybrid Multi-Cloud agreement. An organisation holding both is buying the same capability twice. ### The managed device This is the agent stack, and it is charged per device whether or not that device holds anything worth protecting. That is not duplication. It is protection bought for machines with nothing on them to protect. ## What the Modelling Shows Our modelling of a 2,000-user organisation, already a Citrix UHMC customer with all staff on Microsoft 365 E5, puts combined licensing and endpoint agent spend at around AU$2.93 million a year. That assumes endpoint tooling at the low end of the market, roughly AU$27 per device per month, so it is a conservative starting point. Mapping licences and endpoint models to personas rather than applying one posture to everyone changes that materially. - Executives, administrators and high-risk roles, around 400 people, stay on E5 with a fully managed endpoint. - Standard users, around 1,200 people, move to E3 and split evenly between managed endpoints and Citrix UniconOS endpoints. - Task and frontline workers, around 400 people, move to F3 with Citrix UniconOS. Combined spend in that model falls to approximately AU$1.70 million, a reduction of about 42%. The saving recurs at every licence renewal rather than being a one-off. *(Source - CXANZ persona mapping model, illustrative, presented at customer and event sessions 2026;* [*contact us*](https://www.cxanz.com/meet-the-team) *to see how this maps for your organisation.)* ## Two Levers, Not One It is worth being precise about where that saving comes from, because the headline figure is easy to misread. Roughly three quarters of it comes from matching Microsoft licence tiers to what people actually do. The remaining quarter comes from Citrix UniconOS displacing the endpoint agent stack on devices that no longer store anything locally. The two are independent, which matters: an organisation can pursue either on its own, and the numbers add rather than overlap. Further opportunities for savings can be accessed through hardware refresh deferral, reduced operational overhead and in-session tooling consolidation. ## The Objection Worth Taking Seriously Downgrading a licence tier sounds like removing capability, and sometimes it is. The question is whether the capability being removed is one the person was using. A frontline worker on a shared terminal, reaching two applications through a browser, does not need the advanced security features of a premium licence. Someone in Finance handling sensitive records does. The argument is not that premium licensing is wasteful. It is that applying it uniformly is. ## Where to Start Before modelling anything, two pieces of information are worth gathering: how many distinct user personas your organisation actually has, and what the endpoint agent stack costs per device per year. Most IT teams answer the first quickly and find the second surprisingly hard, which is usually a sign it's worth knowing. CXANZ is the local Citrix team across Australia, New Zealand and the Pacific, backed by global expertise and focused on helping customers and partner’s win. Not sure if you're getting the most from your Citrix investment? Our Solutions Experts offer a [complimentary 60-minute Citrix Review](https://www.cxanz.com/resources/citrix-review) that maps your current environment against the capabilities you already own. You'll receive a written assessment, prioritised recommendations and a practical roadmap for next steps. No cost. No obligation. And if you're already using everything available to you, we'll tell you.   Previous Blog [← Windows 10 Is Over. Deferring Your Upgrade Now Costs Triple.](https://www.cxanz.com/blog/windows-10-end-of-support-esu-costs) Next Blog [Australia's 1,205 Data Breaches: What the Numbers Don't Show →](https://www.cxanz.com/blog/australia-data-breaches-2025-endpoints) ![CXANX+Citrix LockUp White](https://www.cxanz.com/hs-fs/hubfs/CXANX+Citrix%20LockUp%20White.png?width=300&height=40&name=CXANX+Citrix%20LockUp%20White.png) Cloud Software Group and any trademarks, service marks, trade names, and logos of Cloud Software Group (including Citrix and NetScaler) are owned by Cloud Software Group, Inc. and/or its affiliates and are used by Dicker Data under license from Cloud Software Group, Inc. Dicker Data Ltd is a strategic partner of Cloud Software Group, Inc. and is not a corporate subsidiary or agent of Cloud Software Group, Inc. and/or of its affiliates. Copyright © 2026 Dicker Data Ltd. All rights reserved. ABN 95 000 969 362 - [Privacy Policy](https://www.cxanz.com/privacy-policy) - [LinkedIn](https://www.linkedin.com/company/cxanz) - [YouTube](https://www.youtube.com/@CXANZCitrix) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Roshantha Pillay", "url" : "https://www.cxanz.com/blog/author/roshantha-pillay" }, "dateModified" : "2026-10-28T04:57:32.164Z", "datePublished" : "2026-10-28T04:57:18.000Z", "headline" : "Persona-Based Licensing: Cut Endpoint Spend by 42%", "image" : [ "https://www.cxanz.com/hubfs/FIL_CX_GEO_Blog%203%20-%20Nov%2026.jpeg" ], "mainEntityOfPage" : { "@id" : "https://www.cxanz.com/blog/persona-based-licensing-endpoint-costs", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.cxanz.com/hubfs/assets/logos/CXANZ-DD-AU.svg" } } } ```