User Profile Assessment

A user profile in Zero Trust Risk Insights details a user's risk score, cloud activities, and device associations that contributed to the assessment.

The User Profile screen provides the following information to help you better understand a user's impact in your organization.

Area

Description

User details

Hover over the user name to view basic user information

Click the options button to view a list of available mitigation actions that you can take on the account or view the Zero Trust Action History for the account.

For more information, see Zero Trust Actions.

Risk Assessment

An account's risk assessment displays activity data in several widgets.

  • Risk Score: Assessment of the user's behavioral and cloud activity over the last 30 days

    Note:

    A user's risk score is calculated every 4 hours.

  • Risk Indicators: A list of events that may indicate that the user account has been attacked or hijacked

  • Account Activity by location: A geographical representation of where the user account has been accessed

Cloud App Activity

An account's cloud app activity displays in several widgets.

  • Sanctioned / Unsanctioned Cloud App Access: Indicates how often a user/device accesses sanctioned/unsanctioned cloud apps

  • Accessed Cloud App Risk Levels: Displays how many cloud apps the user/device accessed on a given day and the proportionate risk levels of the apps

  • Cloud App Usage by Category: Displays the categories of the cloud apps accessed by the user/device

  • Account Activity: A geographical representation of where the user account has been accessed cloud apps

Devices

The devices accessed by the user and each device's risk score

Click a device name to view the Device Profile Assessment.