Metrics Library

Grab a list of users that have been locked out of Duo. Users[?lockout_reason != `null`].realname

This metric lists all the child account id's and the account name. Accounts[?account_id].[account_id | name]

Days can be modified to whatever you wish Users[?last_login && realname && time_since(last_login, days ) > 7 ][['--'],['Username:'realname], ['Days since last Logon:' time_since(last_login, days )]][]

This grabs all the users who need to be billed, then sorts out the ones labeled 'pending deletion'. After that, we use the ceiling and divide functions to figure out how many 'billable buckets' there are. This gives you the count in multiples of 10, and you can tweak it as needed. ceil(divide(length(Users[?!contains(status, pending deletion )]), 10 ))

Duo: New Active Users <30 days Users[?status == active && time_since(created, days )< 30 ].[email, created]

Grab all users who are showing as disabled. Users[?status == disabled ]. username

Lists all Duo users and their assigned groups Users[].['User:'realname,'-' 'Assigned Group:'groups[].name]

List of all Duo Groups Groups[].name

Per ( https://help.duo.com/s/article/3670?language=en_US ) duo support users are billed unless they are in the Trash or a Pending Delation Status. The above metric will return a list of users excluding those with the pending deletion status.If you are looking to display the count versus the list you can use this metric:Users[?!contains(status, pending deletion )] | length(@) Users[?!contains(status, pending deletion )].join( : , [username,status]) | sort(@)

This is helpful to someone who's trying to obtain/maintain visibility into the active admin users in an organization's Duo instance. This is a good Metric for QBRs or recurring site reviews. Also, this Metric could be used to build a user audit with the intention of an end customer confirming that all looks as expected. Admins[].name