AnsweredAssumed Answered

License seperation

Question asked by Wesley Van Houten on Sep 25, 2017
Latest reply on Sep 25, 2017 by Piers Bowness

Like • Show 0 Likes0
Comment • 1

Is it possible to assign license quantities to security domains?

Here the example of what I want to do:

As whole we have 2000 licenses.

And I want to split those licenses into 4 groups.

Domain 1: is the main organization with 1300 of the licenses

Domain 2: is a merged organization that wants to continue managing themselves separately at 200 users

Domain 3: will be used for rotating students with 500 licenses

Domain 4: will be for 500 external contractors.

In this configuration I want to set it up so the person that manages domain 4 cannot add more users than they are allowed.

Piers Bowness

Sep 25, 2017 12:23 PM

Correct Answer

Hi Wesley,

This is not a current capability of the system. You could give those administrators a special role that would permit them to do all actions other than add a user (with some other administrator or application being used to control the addition of users to that security domain). It might not be a bad idea to have extra controls on the addition of "external contractors".

A less invasive approach would be to run a query that counted the number of users in each security domain and reported if the domains were over their allocated limit. You easily could have a script that connected to the database and generated this information. You can create a read-only database connection account using the "manage-readonly-dbusers" CLU.

I think the SQL below would provide the results in which you're interested:

select sd.name "Security Domain",count(*) "User Count"
         from rsa_rep.ims_principal_data pd, rsa_rep.ims_security_domain sd
         where pd.owner_id=sd.id
         group by sd.id;

-Piers

See the reply in context

No one else had this question

Outcomes

select sd.name "Security Domain",count(*) "User Count"
         from rsa_rep.ims_principal_data pd, rsa_rep.ims_security_domain sd
         where pd.owner_id=sd.id
         group by sd.id;

1 Reply

Piers Bowness Sep 25, 2017 12:23 PM
Unmark Correct
Correct Answer
Hi Wesley,
This is not a current capability of the system. You could give those administrators a special role that would permit them to do all actions other than add a user (with some other administrator or application being used to control the addition of users to that security domain). It might not be a bad idea to have extra controls on the addition of "external contractors".

A less invasive approach would be to run a query that counted the number of users in each security domain and reported if the domains were over their allocated limit. You easily could have a script that connected to the database and generated this information. You can create a read-only database connection account using the "manage-readonly-dbusers" CLU.

I think the SQL below would provide the results in which you're interested:
```
select sd.name "Security Domain",count(*) "User Count"
         from rsa_rep.ims_principal_data pd, rsa_rep.ims_security_domain sd
         where pd.owner_id=sd.id
         group by sd.id; 
```
-Piers
1 person found this helpful
Like • Show 1 Like1
Actions

License seperation

Outcomes

Related Content

Recommended Content