At-risk users widget

The At-risk users widget displays the number of users with high and medium entity risk levels over the last seven days. It also displays the most recent users to attain a high or medium risk level. It doesn’t display users whose risk level changed from high to low, or users with a low risk level.

The widget also indicates when a user's entity risk level changed. You can see the exact time when these events occurred in the At-risk user report.

You can use the information on this widget to identify which users currently have high and medium risk-level events.

Click At-risk users to view all at-risk users.

Related topics

Entity risk detections widget

Post auth session violations widget

System Log events for Identity Threat Protection