Users
Users page (Data Security Workbench application > Users) is a catalog of all identified users providing enriched user information. From this screen, you can explore and filter users by their directory attributes, such as title, manager, location, users' groups, and risk levels and risk profiles.
Currently this page is for CASB data.
Additional context about each user including the user's details, recent alerts, remediations triggered and more is available.
User List Overview
The list of users provides the following information for each user. You can select which columns you want to display. Fields included:
-
User
-
Groups
-
Directory
-
Intelligence: Risk information from Proofpoint NPRE
-
Record: Type, ID, Feed, Entity and Time
-
Source: Entity, User, Event, Activity and Feed information
-
Organization: ID, Customer ID and Type, Alias, Name and Region Instances
-
Default: Source ID
-
Primary: Source ID
Selecting the Fields in the Users List
-
From Display These Columns , select the columns you want and click Done.
Understanding Users and Groups in Users Catalog
The following fields are available for Users and Groups: (Available from Mac version 4.2)
-
User ID from Catalog and Group ID from Catalog: These fields refer to the IDs only and the originate from the Users Catalog only.
Use these fields when you want to create rules that target explicit IDs. Since the rule is based solely on the ID, rules remain valid even if you change the User/Group Name.
Rules with these fields are limited to In and Not In operators.
When you create a rule, using these fields, the name is displayed for clarity only.
-
User Name and Group Name: These fields refer to names of the users/groups and originate from Users Catalog or Users Activities.
These fields allow targeting based on pattern matching using wildcard operators (e.g., 'contains').
For example, block all groups where Group Name starts with "admin".
Since these fields are based on the name, if you change the name, the rule will not match.
Data Export
You can export to CSV, JSON or PDF format. You can export by selected users or by a number of users.
Filter from the List
From any field in any user, click ... and you can:
-
Filter by the field. For example, filter by all users with the same Directory Title.
-
Exclude the field. For example, exclude all users with Vulnerable Intelligence with severity Critical.
-
Add as a column in the table.
-
Open Exploration for the field you selected.
Actions and View User Details
By selecting a user, you can see additional user details and available actions.
Actions
Available actions are:
-
Show Empty Fields
-
View JSON
Explore Activities
Click Explore Activities and the Explorations page where you can search for more information about the user you selected is displayed.
View User
Click View User to see information about the user. For details about the User View, see Users Data.
Related Topic: