USM Anywhere™

User List View

USM Anywhere provides a centralized view of usersIn UBA, users are the authenticated people (or service accounts) taking actions in your environment. in your environment. To view the user list, go to Environment > Users.

The Users main page displays user inventory and information on those users. On the left side of the page, you can find the search and filter options. At the top of the page, you can see any filters you have applied. The main part of the page is the list of users, where each row describes an individual user.

The User List view displays all UBA users discovered in your environment.

If you want to analyze the data and see the additional columns without having to scroll left and right, you can maximize the screen and hide the filter panel. Click the icon to hide or expand the filter panel.

Note: User entities with no name or service account in their name field appear as "Unspecified".

The following table lists the default columns that appear in the user list view, and their descriptions.

List of the Default User List Fields
Column Field Name Description
User An actor (person or service account) active in your environment (sometimes referred to as the user entity)
Last Seen The date and time on which that user was last active in your environment
Email A list of the email addresses associated with that user entity
Origin The name of each sensor in which one of this user's accounts was discovered

Click the icon to access these options:

  • Full Details: Navigate to this user's Full Details page
  • Configure User: Open the Configure User dialog box
  • Merge User: Open the Merge User dialog box
  • Delete User: Delete this user

Important: Deleting a user is a permanent action and cannot be undone.