Users
The Users tab displays all active users within your organization, along with actions taken or related settings that, intentionally or not, are exposing your environment to threats. It provides information such as the user name, level of overall risk severity for that user, the user's title and department, number of risks they are exposed to, and their status in calculating the overall company risk.
Note
See User behavior risk data collection for more details on how we process user data.
The Smart views panel toggle button. This feature allows you to customize, save, and switch between different loadouts of the Users page.
The panel has the following sections:
Search views - Use this search field to filter out the views displayed in the sections below, by name.
Saved - This section displays a list of all your saved views that have not been marked as favorites.
Favorites - All views marked as favorites are displayed under this section.
Defaults - This section displays the views that are available by default:
All Users
High risk level
Detected
Ignored
Watchlist
For any view in the Saved or Favorites category, you can click the vertical ellipses
to Rename or Delete the view.The User actions. This section contains the buttons to all the available actions you can take on the risks displayed on the page:
State - Change the state of the selected risks. The following options are available:
Ignore users.
Restore ignored users
Watchlist - Add or removed the selected risks from your watchlist. The following options are available:
Add to watchlist
Remove from watchlist
Scan - Perform a scan to check for new risks or updates on known risks.
The Filters section. You can use these options to customize the risks that are displayed in the below grid.
The following filters are currently available:
Filtering option
Details
User name
Use the searchable drop-down menu to filter the list of users by name. Select the users you want to display and click Apply.
Only the selected Users are displayed.
Risk score
Select a score range between 1 and 100.
Only controls with a risk score between these values are displayed.
Human risk name
Use the searchable drop-down menu to filter the list of Human risks by name. Select the human risks you want and click Apply.
Only the users for which the selected human risks have been detected are displayed.
User type
Use the searchable drop-down menu to filter the list of user types by name. Select the user types you want and click Apply. Possible values:
Local
AD
Azure AD
Only users of the selected types are displayed.
User devices
Use the searchable drop-down menu to filter the list of devices by name. Select the devices you want to display and click Apply.
Only users that use the selected devices are displayed.
Department
Use the searchable drop-down menu to filter the list of departments by name. Select the departments you want to display and click Apply.
Only users belonging to the selected departments are displayed.
Status
Use the searchable drop-down menu to filter the list of users by status. Select the statuses you want and click Apply. Possible values:
Compliant
Detected
Only users with the statuses you selected are displayed.
State
Use the searchable drop-down menu to filter the list of users by state. Select the states you want and click Apply. Possible values:
Active
Ignored
Only users with the states you selected are displayed.
In watchlist
Use this filter to display users based on them currently being included in a watchlist or not. Possible values:
Yes
No
The View options menu. This section provides you with multiple functions for working with views:
Save - Save changes you make to a saved view.
Save as - Save a modified view under a different name.
Discard changes - Revert the saved view to its original state.
Add to favorites - Add the view to the Favorites category.
Export view - Download the information in a
.csvfile, which can contain up to 1500 rows.Show or hide filters - Hide or display the filters menu.
Open settings - Display the Settings panel.
You can use this panel to customize what columns are displayed in the view and enable or disable the Compact view.
The Users grid. The grid displays all known Users in your company, based on your last scan.
The information available for each Users displayed under the following columns:
User name - The name of the user.
Risk score - The risk score of the user.
Human risks - The number of human risks that have been detected for this user.
User devices - The number of devices that this user is assigned to, grouped per endpoint type.
Department - The department the user is assigned to.
Status - The status of the user.
State - The state of the user.
In watchlist - Indicates if the user is currently in the watchlist.
Note
More details regarding the information in each column are available type in the Filters section.
Actions button - Displays all the actions you can take on each user. Possible values:
Ignore risk
Add to watchlist