Predictika · Security and IT auditing software licenses

An AI sales agent's Auditor license quote, checked before it goes out

An AI sales agent prepares a quote for Netwrix Auditor subscription licenses: which data sources are covered and how many licenses each one needs, counted in enabled Active Directory users, servers, devices, processors, Entra ID users or mailboxes. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the counting rules in Netwrix's public licensing documentation and returns a verdict, every reason and the figures it computed.

Scope: Netwrix Auditor Enterprise Advanced license quotes for Active Directory, Windows Server, SQL Server, VMware, Windows File Servers, Network Devices, Oracle Database, Entra ID, Exchange and MS Teams: the license count each data source needs. See everything this validator covers

This validator models one Netwrix Auditor subscription license quote at a time, based on the public Netwrix Auditor licensing documentation, and handles any quote that uses these data sources, not just the scenarios shown below.

  • Counted by enabled AD users — Active Directory, SQL Server, VMware and Windows File Servers (and Windows Server when licensed per user): the count is the enabled AD users, service accounts included, less users in omitted OUs; disabled accounts are not counted.
  • Counted by server, device or processor — Windows Server can be licensed per enabled AD user or per server; Network Devices by physical device; Oracle Database by processor licenses (cores times the core factor).
  • Microsoft 365 and Entra ID sources — Entra ID and MS Teams by enabled Entra ID user (guests and users on the omit list left out); Exchange by user mailbox (shared and resource mailboxes left out); SharePoint is not modeled (see below).
  • Edition and quote shape — the Free Community Edition is distributed free of charge and takes no licenses; an Enterprise Advanced quote needs at least one data source. A quote with fewer licenses than the count is blocked; one with more is accepted, because Netwrix recommends rounding the count up to leave room for growth.

Any Netwrix Auditor license quote that touches these rules is in scope — not only the scenarios pictured here. Not covered: prices (Netwrix publishes no list prices, so this page shows no price build-up), SharePoint (the Licensing FAQs state its counter two different ways, so it is left out), the other data sources Netwrix Auditor supports (for example NetApp, Nutanix Files, Qumulo, Synology and Access Reviews), other Netwrix products, support terms and perpetual licenses. Oracle processors are modeled as whole numbers.

The AI sales agentBuilds the license quote from the conversation and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      
Waiting for the call.

Where rules-based CPQ gets it wrong

Click to expand

Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

What the validator caughtTypical rules-based CPQPredictika
A license count that depends on what is counted (enabled users, not disabled accounts; guests and shared mailboxes left out)Only with care
The count for each data source follows its own exclusions, so a rule per source and a number kept in step with the documentation; a quote that used the raw directory total is silently wrong.
The environment counts and the quoted license counts arrive in one request and each is compared with the computed count on every call.
Windows Server licensed per user or per serverOnly with workarounds
The same data source takes a different unit depending on a choice, so the quantity rule branches on that choice and has to be kept consistent with the line quantity.
The mode and the counts are in one request; the required count follows the mode on every call.
Oracle processor licenses (cores times a core factor)Only with care
A calculated quantity from two inputs, compared with the line; easy to get right once, easy to let drift.
The cores, the factor and the quoted licenses are checked together.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a person often fixes one error and meets the next.
All findings come back together, whatever order the choices arrived in.

What this validator catches: findings from its test cases

Click to expand

Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

1The quote has 999 Active Directory licenses; Netwrix Auditor counts 1,000 (enabled AD users).
2The quote has 900 SQL Server licenses; Netwrix Auditor counts 1,000 (enabled AD users).
3The quote has 990 VMware licenses; Netwrix Auditor counts 1,000 (enabled AD users).
4The quote has 500 Windows File Servers licenses; Netwrix Auditor counts 1,000 (enabled AD users).
5The quote has 24 Windows Server licenses; Netwrix Auditor counts 25 (enabled AD users or servers).
6The quote has 60 Network Devices licenses; Netwrix Auditor counts 85 (devices).
7The quote has 8 Oracle Database licenses; Netwrix Auditor counts 16 (processors).
8The quote has 950 Entra ID licenses; Netwrix Auditor counts 1,000 (enabled Entra ID users).
9The quote has 700 Exchange licenses; Netwrix Auditor counts 720 (user mailboxes).
10The quote has 7 Oracle Database licenses; Netwrix Auditor counts 8 (processors).
11The quote has 2,900 MS Teams licenses; Netwrix Auditor counts 2,940 (enabled Entra ID users).
12The Free Community Edition is distributed free of charge; the quote has licenses for 2 data sources.
13The Enterprise Advanced quote has no data source licenses.

Scenarios and results

Click to expand

The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

1. Windows environment: Active Directory, SQL Server and file servers licensed on a stale user count

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Active Directory 1,800; SQL Server 1,800; Windows File Servers 1,800. The customer has 1,841 enabled AD users, 120 disabled AD accounts. It is ready to send.

Verdict: Blocked.

  • Active Directory licenses below the count. The quote has 1,800 Active Directory licenses; Netwrix Auditor counts 1,841 (enabled AD users).
  • SQL Server licenses below the count. The quote has 1,800 SQL Server licenses; Netwrix Auditor counts 1,841 (enabled AD users).
  • Windows File Servers licenses below the count. The quote has 1,800 Windows File Servers licenses; Netwrix Auditor counts 1,841 (enabled AD users).

2. Windows environment: The agent resubmits after fixing the errors

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Active Directory 1,841; SQL Server 1,841; Windows File Servers 1,841. The customer has 1,841 enabled AD users, 120 disabled AD accounts. It is ready to send.

Verdict: Allowed.

  • Order summary. Data sources on the quote 3; enabled AD users counted 1,841; enabled Entra ID users counted 0; licenses on the quote in total 5,523; licenses the counting rules need for the quoted sources 5523.

3. Microsoft 365 sources: Entra ID, Exchange and Teams licensed below their counts

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Entra ID 2,800; Exchange 2,900; MS Teams 2,940. The customer has 3,150 enabled Entra ID users, of which 210 are guests, 2,900 personal mailboxes, 15 archive-only mailboxes, 120 shared and resource mailboxes. It is ready to send.

Verdict: Blocked.

  • Entra ID licenses below the count. The quote has 2,800 Entra ID licenses; Netwrix Auditor counts 2,940 (enabled Entra ID users).
  • Exchange licenses below the count. The quote has 2,900 Exchange licenses; Netwrix Auditor counts 2,915 (user mailboxes).

4. Microsoft 365 sources: The agent resubmits after fixing the errors

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Entra ID 2,940; Exchange 2,900; MS Teams 2,940. The customer has 3,150 enabled Entra ID users, of which 210 are guests, 2,900 personal mailboxes, 15 archive-only mailboxes, 120 shared and resource mailboxes. It is ready to send.

Verdict: Blocked.

  • Exchange licenses below the count. The quote has 2,900 Exchange licenses; Netwrix Auditor counts 2,915 (user mailboxes).

5. Microsoft 365 sources: The agent resubmits after fixing the errors

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Entra ID 2,940; Exchange 2,915; MS Teams 2,940. The customer has 3,150 enabled Entra ID users, of which 210 are guests, 2,900 personal mailboxes, 15 archive-only mailboxes, 120 shared and resource mailboxes. It is ready to send.

Verdict: Allowed.

  • Order summary. Data sources on the quote 3; enabled AD users counted 0; enabled Entra ID users counted 2,940; licenses on the quote in total 8,795; licenses the counting rules need for the quoted sources 8795.

6. Servers, devices and Oracle: Windows Servers per server, network devices and Oracle processors licensed below their counts

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Windows Server 30; Network Devices 60; Oracle Database 6. The customer has 40 Windows servers to monitor, licensed per server, 85 physical network devices, Oracle servers with 16 processor cores at a core factor of 0.5. It is ready to send.

Verdict: Blocked.

  • Windows Server licenses below the count. The quote has 30 Windows Server licenses; Netwrix Auditor counts 40 (enabled AD users or servers).
  • Network Devices licenses below the count. The quote has 60 Network Devices licenses; Netwrix Auditor counts 85 (devices).
  • Oracle Database licenses below the count. The quote has 6 Oracle Database licenses; Netwrix Auditor counts 8 (processors).

7. Servers, devices and Oracle: The agent resubmits after fixing the errors

The agent's request. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Windows Server 40; Network Devices 85; Oracle Database 8. The customer has 40 Windows servers to monitor, licensed per server, 85 physical network devices, Oracle servers with 16 processor cores at a core factor of 0.5. It is ready to send.

Verdict: Allowed.

  • Order summary. Data sources on the quote 3; enabled AD users counted 0; enabled Entra ID users counted 0; licenses on the quote in total 133; licenses the counting rules need for the quoted sources 133.

Narration transcript

Click to expand

The text of the narrated walkthrough, step by step.

  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a quote for Netwrix Auditor subscription licenses: which data sources are covered and how many licenses each one needs, counted in enabled Active Directory users, servers, and more. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the counting rules in Netwrix's public licensing documentation and returns a verdict, every reason and the figures it computed.
  2. I will start with the first request by the agent.
  3. The agent says. Please quote Netwrix Auditor Enterprise Advanced on a yearly subscription with these licenses: Active Directory 1,800; SQL Server 1,800; Windows File Servers 1,800. The customer has 1,841 enabled AD users, 120 disabled AD accounts. The rest of the request is on screen.
  4. Before it goes out, the agent calls the validator.
  5. Blocked, with three findings, all in one answer. The quote has 1,800 Active Directory licenses; Netwrix Auditor counts 1,841 (enabled AD users). The quote has 1,800 SQL Server licenses; Netwrix Auditor counts 1,841 (enabled AD users). The quote has 1,800 Windows File Servers licenses; Netwrix Auditor counts 1,841 (enabled AD users).
  6. The validator returned three blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other.
  7. What this shows: for a license count that depends on what is counted (enabled users, not disabled accounts; guests and shared mailboxes left out), a rules-based CPQ is error-prone for this.
  8. Now the agent resubmits.
  9. The corrected request. It changes the Active Directory licenses quoted to 1,841, the SQL Server licenses quoted to 1,841 and the Windows File Servers licenses quoted to 1,841.
  10. It calls the validator again.
  11. This time the validator clears it.
  12. All three earlier findings are cleared, and the validator's figure matches the quote.
  13. Three problems caught in one call, fixed in one pass, and a clean quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.