Finding GRC app usage per license

BrandonS2
Tera Contributor

‎04-01-2026 07:09 AM - edited ‎04-01-2026 07:10 AM

I'm attempting to create a report to track the usage of certain licenses related to specific GRC (Governance, Risk, Compliance) applications.
We're looking for a way to identify users who have not used any of their GRC access across all GRC applications/tables, so we can confidently remove all of their GRC roles and reclaim a license.

Is there a way to go about this in Platform analytics?

0 Helpfuls
  • 317 Views
1 REPLY 1

pr8172510
Tera Guru

‎04-02-2026 01:28 AM

Hi BrandonS2,

Good question — this is a common requirement, but there is no single OOB table or PA indicator that directly tracks “GRC license usage”.

1. Key point (important)

GRC usage is role-based, not activity-based OOB.

Platform Analytics does NOT track:

  • “who used GRC” directly
  • It tracks data, not user interaction across modules

2. Recommended approach → Activity + Role correlation

You need to combine:

 A. Identify GRC users (license holders)

  • Table: sys_user_has_role
  • Filter:
    • Roles like:
      • sn_risk.*
      • sn_compliance.*
      • sn_audit.*

 B. Track actual usage (activity)

Check user activity on key GRC tables:

  • sn_risk_risk
  • sn_compliance_control
  • sn_audit_engagement
  • sys_audit (for updates)
  • syslog_transaction (optional, more detailed)

 Filter:

  • Updated by / Created by
  • Last X days (e.g. 30/60/90 days)

3. Identify inactive users

Logic:

  • Users with GRC roles
  • BUT no activity in GRC tables in last X days

These are candidates for license removal

4. Can this be done in Platform Analytics?

Not directly OOB

But you can:

Use PA with custom indicators

Indicator 1 → Users with GRC roles

  • Indicator 2 → Users active in GRC tables
  • Breakdown → User

Then:
Compare / filter inactive users

5. Better approach 

Use:

  • Database View OR Scripted Report

Join:

  • sys_user_has_role
  • Activity tables

Easier than pure PA

0 Helpfuls