Finding GRC app usage per license

[BrandonS2]

I'm attempting to create a report to track the usage of certain licenses related to specific GRC (Governance, Risk, Compliance) applications.
We're looking for a way to identify users who have not used any of their GRC access across all GRC applications/tables, so we can confidently remove all of their GRC roles and reclaim a license.

Is there a way to go about this in Platform analytics?

[pr8172510]

Hi BrandonS2,

Good question — this is a common requirement, but there is no single OOB table or PA indicator that directly tracks “GRC license usage”.

---

1. Key point (important)

GRC usage is role-based, not activity-based OOB.

Platform Analytics does NOT track:

• “who used GRC” directly
• It tracks data, not user interaction across modules

---

2. Recommended approach → Activity + Role correlation

You need to combine:

 A. Identify GRC users (license holders)

• Table: sys_user_has_role
• Filter:
  • Roles like:
    • sn_risk.*
    • sn_compliance.*
    • sn_audit.*

---

 B. Track actual usage (activity)

Check user activity on key GRC tables:

• sn_risk_risk
• sn_compliance_control
• sn_audit_engagement
• sys_audit (for updates)
• syslog_transaction (optional, more detailed)

 Filter:

• Updated by / Created by
• Last X days (e.g. 30/60/90 days)

---

3. Identify inactive users

Logic:

• Users with GRC roles
• BUT no activity in GRC tables in last X days

These are candidates for license removal

---

4. Can this be done in Platform Analytics?

Not directly OOB

But you can:

Use PA with custom indicators

Indicator 1 → Users with GRC roles

• Indicator 2 → Users active in GRC tables
• Breakdown → User

Then:
Compare / filter inactive users

---

5. Better approach 

Use:

• Database View OR Scripted Report

Join:

• sys_user_has_role
• Activity tables

Easier than pure PA