There are multiple methods to achieve this, both reactive and proactive. Auditing is a pretty common way of doing it, having a monthly report either via PA, or just manual extraction of data. You can also automate licence management via flows. Another common way is to setup alerts when specific set boundaries are hit.
