Steps to Run the Active User Report

1. Download the query script using the link in the Notes section of this article.
2. Confirm that SSH is enabled via the Operations Console under Administration > Operating System Access.
3. Copy the SQL script attached to this article to the  Authentication Manager 8.x primary's /home/rsaadmin directory (using WinSCP for example).
4. Set the file owner for the UserLicenseReportv8.sql file to rsaadmin

chown rsaadmin UserLicenseReportv8.sql

4. Set file permissions on the SQL script to be executable, using one of the two commands below:

chmod +x UserLicenseReportv8.sql

chmod 0755 UserLicenseReportv8.sql

5. Logon to the Authentication Manager 8.x primary via SSH as the rsaadmin user.
6. Determine the Authentication Manager 8.x database password as shown in following example.  Note that the OC administrator name and output password will be different than the example values shown here:

rsaadmin@am8p:~> cd /opt/rsa/am/utils
rsaadmin@am8p:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password
Please enter OC Administrator username: <enter name of the Operations Console administrator>
Please enter OC Administrator password: <enter password for the Operations Console administrator>
com.rsa.db.dba.password: <rsa.db.dba.password is returned>

rsaadmin@am8p:~> cd /opt/rsa/am/utils
rsaadmin@am8p:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password
Please enter OC Administrator username: ocadmin
Please enter OC Administrator password: ********
com.rsa.db.dba.password: GrcvNN2FUAsWjyPfhaIsSWvjvZhvtN

8. Execute the query.  You will be prompted for the com.rsa.db.dba.password output from step 7.

cd ../pgsql/bin
rsaadmin@am8p:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba -f ~/UserLicenseReportv8.sql > ~/output.html
Password for user rsa_dba: <enter com.rsa.db.dba.password captured above>

9. The output.html is written to /home/rsaadmin.  Using WinSCP, or another file transfer tool, copy the output.html file off the Authentication Manager server for review.

Sample Output

Note:  Unresolvable users will also count towards the total number of users. The report generated by this solution will not detect unresolvable users, so please ensure that you run a cleanup identity source job to check for unresolvable users before report execution.  To run the cleanup,

1. Login to the Security Console and select Setup > Identity Sources > Cleanup Unresolvable Users.
2. Select the identity source in question.
3. Define a grace period.
4. Click Next.
5. Review the list of unresolveable users.  
6. Click Clean Up Now.

This solution is applicable only to RSA Authentication Manager 8.x.  

A SQL query script named UserLicenseReportv8 is attached to this article can determine the active user count details and is attached below. You must be logged in to the RSA Community to access the download.