It is normal.
An user can have a session in PCS and not have a tunnel up. That is besides the obvious one users with just core access.
I am having this issue as well. I am running 9.1.5.
The users have full tunnel access with an address which is visible on the connected PC but not showing in "Active Users" This happens randomly .
Another bug in the endless stream of issue with Pulse