for example if we want to select specific people those don't need RSA token any more can we run a script so that there RSA token get removed, irrespective of how long they haven't used that token
I've moved your question to the RSA SecurID Access space where it will be seen by the product's support engineers, other customers and partners. Please bookmark this page and use it when you have product-specific questions.
Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question. From there, scroll to RSA SecurID Access and click Ask A Question. That way your question will appear in the correct space.
+ + +
To answer your question, it looks like you need to use RSA Authentication Manager Bulk Admin. Page 93 discusses the Unassign Token (UT) action.
As stated by Erica, AMBA is the tool you are looking for. You'll need an Enterprise License to be able to use it.
Retrieving data ...