Users

Users page (Data Security Workbench application > Users) is a catalog of all identified users providing enriched user information. From this screen, you can explore and filter users by their directory attributes, such as title, manager, location, users' groups, and risk levels and risk profiles.

Currently this page is for CASB data.

Additional context about each user including the user's details, recent alerts, remediations triggered and more is available.

User List Overview

The list of users provides the following information for each user. You can select which columns you want to display. Fields included:

  • User

  • Groups

  • Directory

  • Intelligence: Risk information from Proofpoint NPRE

  • Record: Type, ID, Feed, Entity and Time

  • Source: Entity, User, Event, Activity and Feed information

  • Organization: ID, Customer ID and Type, Alias, Name and Region Instances

  • Default: Source ID

  • Primary: Source ID

Selecting the Fields in the Users List

  1. To select the fields you want, click Edit Columns icon.

  2. From Display These Columns , select the columns you want and click Done.

Understanding Users and Groups in Users Catalog

The following fields are available for Users and Groups: (Available from Windows 3.5 and Mac 4.2)

  • User  from Catalog and Group from Catalog: These fields refer to the IDs only and the originate from the Users Catalog only.

    Use these fields when you want to create rules that target explicit  IDs. Since the rule is based solely on the ID, rules remain valid even if you change the User/Group Name.

    Rules with these fields are limited to In and Not In operators.

    When you create a rule, using these fields, the name is displayed for clarity only.

  • User Name and Group Name: These fields refer to names of the users/groups and originate from Users Catalog or Users Activities.

    These fields allow targeting based on pattern matching using wildcard operators (e.g., 'contains').

    For example, block all groups where Group Name starts with "admin".

    Since these fields are based on the name, if you change the name, the rule will not match.

Data Export

Click to export the data.

You can export to CSV, JSON or PDF format. You can export by selected users or by a number of users.

Filter from the List

From any field in any user, click ... and you can:

  • Filter by the field. For example, filter by all users with the same Directory Title.

  • Exclude the field. For example, exclude all users with Vulnerable Intelligence with severity Critical.

  • Add as a column in the table.

  • Open Exploration for the field you selected.

Actions and View User Details

By selecting a user, you can see additional user details and available actions.

Actions

Available actions are:

  • Show Empty Fields

  • View JSON

Explore Activities

Click Explore Activities and the Explorations page where you can search for more information about the user you selected is displayed.

View User

Click View User to see information about the user. For details about the User View, see Users Data.

Related Topic:

Users Catalog