AnsweredAssumed Answered

License seperation

Question asked by Wesley Van Houten on Sep 25, 2017
Latest reply on Sep 25, 2017 by Piers Bowness
  • Comment • 1

Is it possible to assign license quantities to security domains?

 

Here the example of what I want to do:

As whole we have 2000 licenses.

And I want to split those licenses into 4 groups.

Domain 1: is the main organization with 1300 of the licenses

Domain 2: is a merged organization that wants to continue managing themselves separately  at 200 users

Domain 3: will be used for rotating students with 500 licenses

Domain 4: will be for 500 external contractors.

 

In this configuration I want to set it up so the person that manages domain 4 cannot add more users than they are allowed.

 

 

.

Piers Bowness
Piers Bowness Employee Sep 25, 2017 12:23 PM
Correct Answer

Hi Wesley,

This is not a current capability of the system. You could give those administrators a special role that would permit them to do all actions other than add a user (with some other administrator or application being used to control the addition of users to that security domain). It might not be a bad idea to have extra controls on the addition of "external contractors". 

 

 

A less invasive approach would be to run a query that counted the number of users in each security domain and reported if the domains were over their allocated limit. You easily could have a script that connected to the database and generated this information. You can create a read-only database connection account using the "manage-readonly-dbusers" CLU.

 

I think the SQL below would provide the results in which you're interested:

select sd.name "Security Domain",count(*) "User Count"
         from rsa_rep.ims_principal_data pd, rsa_rep.ims_security_domain sd
         where pd.owner_id=sd.id
         group by sd.id; 

-Piers

See the reply in context
No one else had this question

Outcomes