Unified Identities
Identities is an Early Access feature in Risk Management that provides a centralized view of identities, their related accounts, and associated risk information. The page allows you to switch between predefined views, filter the identity list, start a risk scan, and manage identity-to-account assignments.
The Identities page
To open the Identities page, navigate to Risk management > Identities from the left-hand navigation pane. The page displays a centralized list of identities and related details such as linked accounts, email addresses, risk score, account types, identity resources, and departments.
The main sections of the page are outlined below.
Smart Views
This panel allows you to switch between the available views of the Identities page. It contains the following sections:
Search views - Use this field to search for available views by name.
Saved - Displays saved views that are available for the page.
Favorites - Displays views that have been marked as favorites.
Defaults - Displays the predefined views available by default:
All identities
High risk score
Detected
Ignored
Watchlist
The Smart views panel can be collapsed using the arrow in its upper-right corner.
The View toolbar
At the top of the content area, the name of the current view is displayed. From this section you can perform the following actions:
State - when selecting specific identities, enables you to ignore them, as well as restore already ignored identities.
Watchlist - lets you add or remove identities from your watchlist.
Manage Identities and accounts - enables you to edit accounts assigned to an identity or create a new identity with specified accounts.
Scan - scans resources and accounts for security risks.
Delete - deletes the selected resource(s).
Filters
You can use these controls to narrow the list of identities displayed in the grid.
Filtering option | Details |
|---|---|
Identity name | Filters the list by identity name. |
Accounts | Filters the list by linked account. |
Risk score | Filters the list by the selected risk score range. |
Risk name | Filters the list by risk label. |
Account types | Filters the list by account type. |
More | Opens additional filtering options. |
Reset filters | Clears the active filters and restores the default filter state. |
View options
Save - Save the current view.
Save as - Save the current view under a specific name.
Discard changes - Discard all changes made to the current view.
Add to favorites - Add the current view to Favorites.
Toggle filter visibility - Show or hide the filters.
Open settings - Opens the Settings menu.
Identities
This table displays the identities that are available in the current view. Columns may include:
Identity name
Accounts
Emails
Risk score
Additional identity-related counters
Account types
Identity resources
Departments
A checkbox at the beginning of each row allows you to select one or more entries. The table can be sorted by supported columns, such as Risk score, and each row includes an actions button at the far right. The bottom bar shows the number of items in the current view, while the refresh button in the lower-right corner reloads the grid.
Starting a risk scan
To start a risk scan, click Scan on the Identities page. The Start risk scan? dialog is displayed.
The dialog explains that all available resources and accounts are scanned and checked for security risks. These may include endpoints, users, configured networks, and cloud resources. The results are then used to update Risk Management records. The dialog also indicates when at least one scan task is already pending or in progress.
The following scan types are available:
Endpoints scan
Cloud resources scan
Network scan
Select the scan types you want to run, then click Scan. To close the dialog without starting a scan, click Cancel or the X button in the upper-right corner.
Managing identities and accounts
To open this screen, click Manage identities and accounts on the Identities page. The Manage identities and accounts screen allows you to assign or unassign accounts to an existing identity, or create a new identity.
The Select or create identity section provides the following options:
Select an existing identity - Use the drop-down list to choose an existing identity.
Create a new identity - Enter a name for the new identity in the text field.
Only one option can be active at a time. After you provide the required information, click Create to continue. To exit the screen without applying changes, click Cancel or the X button in the upper-right corner.
Viewing identity details
You can view detailed information about an identity by selecting its entry on the main Identities page. A side panel opens on the right side of the screen and displays summary information, available actions, and related accounts for the selected identity.
Identity side panel
The identity side panel contains the following sections and controls:
Header
The top of the panel displays the name of the selected identity. to close the panel, click the X button in the upper-right corner.
General
This section displays general information about the selected identity:
Risk score - The current risk level and score for the identity
Status - Indicates the current status of the identity.
State - Indicates the current operational state of the identity.
In watchlist - Shows whether the identity is currently included in the watchlist.
The following actions are available in this section:
View risks - Opens the risks associated with the selected identity.
Add to watchlist - Adds the identity to the watchlist.
View events and alerts - Opens the events and alerts related to the selected identity.
Risk Mitigation
This section contains the Ignore identity action, which marks the selected identity as ignored.
Accounts
You can switch from the Identity risks to the Accounts tab, where the panel displays the accounts associated with the selected identity.
The Accounts tab includes the following controls:
Show ignored accounts - Displays or hides ignored accounts in the list.
Accounts - Shows the total number of accounts currently associated with the identity.
Search account - Filters the list of accounts by name.
Account list - Displays the accounts linked to the selected identity. Each row includes the account name and additional row-level controls.
At the bottom of the panel, the following actions are available:
Edit - Opens the edit flow for the selected identity.
Delete - Starts the deletion flow for the selected identity.
If the selected identity contains more information than can be displayed at once, use the scroll bar in the side panel to view the remaining details.