Accounts

What is the Accounts page?

The Accounts page provides a view into the registered accounts associated with any registered connectors. View Accounts by source, linked identities, amount of privileged access, and more.

Accounts are displayed in order of privileged access and associated key entitlements. Privilege is sorted by Highest, High, Moderate, Low, None, and Undetermined, and is based on each account's administration and access capabilities.

How is it useful?

Use the Accounts page to discover which accounts possess high-level or administrative privileges, track membership in security groups or role access, and view areas of potential risk and remediation in the Detections and Recommendations columns.

Search and filter results

On the Accounts page, search results display automatically as you add search terms and select options.

Use a Saved filter

Select a Saved filter from the drop-down list.

Create your own filter

Click Add Filter.
The Filter Detections dialog box displays.
Select And or Or to determine how you want the saved filter to refine the first data set you're entering.
Optionally, click Add Filter to add a new set of filtering criteria, and select your criteria from the drop-down menus.
Optionally, click Add Group to add a group of additional filters to further refine your filtered criteria.
Click Apply Filter.

Use the columns

Not all columns display by default. Use the columns to search for a(n):

account: Enter a digit in the Accounts field and, optionally, select a filter.Filters include is equal to, is not equal to, Is greater than, Is greater than or equal to, Is less than, and Is less than or equal to.
provider: Enter or select a provider name in the Providers list.
location: Enter the Location name.Filters include is equal to, is not equal to, Contains, Starts with, Ends with, and Does not contain.
type: Select Users, Service Principals, or Identity Center Users from the Type drop-down list.
direct privilege: Enter or select a Direct Privilege. Direct privileges are the inherent rights of an account.
True Privilege: Enter or select a True Privilege. True Privilege is the full scope of access an account could potentially gain. A True Privilege score shows what detections and recommendations put highly privileged accounts at risk.
label: Enter or select a label name in the Labels list.Filters include Brute force ongoing, Disabled, Dormant, Human, Human daily driver, and Password Safe managed. Dormant accounts are active accounts that have not been used in 60 or more days.
state: Select Activated or Deactivated in the State list.
total number of associated key entitlements: Enter a number for the total number of key entitlements associated with an account. Filters include is equal to, is not equal to, Is greater than, Is greater than or equal to, Is less than, and Is less than or equal to.
detection: Enter a Detection Name and, optionally, select a filter.Filters include is equal to, is not equal to, Contains, Starts with, Ends with, and Does not contain.
number of recommendations: Enter a number for the total number of recommendations associated with an account. Filters include is equal to, is not equal to, Is greater than, Is greater than or equal to, Is less than, and Is less than or equal to.
dormant days the number of days an account has been dormant.

Customize your recommendations display

Select which columns to view in your results list via the Columns icon and reorder your results by column:

Click the column header to activate it.
Click the arrow icon in the activated column to sort alphabetically or numerically.

View the Account Details page

Click an account name to open the Account Details page.

The Account Details page summarizes the account status, source, and assigned privilege, as well as a description of the detection. It also includes additional attributes, depending on the account source.

Entitlements tab: At-a-glance access to the account's entitlements, enabling you to quickly identify areas of potential risk or elevated privilege.
Detections tab: A ranking of any areas of risk, according to possible severity. Click any individual detection to view detailed results to understand both the risk and its importance or severity.
Recommendations tab: A list of security posture recommendations that are available to mediate risk.