For the first question : use who or finger and you'll see who's logged. For the second - how is the access policy organized - controlled by which application or audit control in your case ? We can't be aware of the policy your organization is using or have applied on your servers.