Managing Users

Permission required

You need Browse users & groups (ad.users.read) to view users. Write controls require Create / modify users (ad.users.write); the broker also checks the permission for the requested operation.

The Users page

Click Users in the left navigation. The page shows account totals and a user table with columns for name, department, status, risk, and last logon.

There is no directory tree on this page. To load or select users from an organisational unit, use Select users in OU… and choose an OU in the dialog.

Searching

Type in Search users… to match a SAM account name, display name, user principal name, or department. Results update as you type.

Filtering users

The filters are independent toggle buttons. You can turn on more than one:

Filter	Shows
Active	Enabled accounts
Locked	Locked-out accounts
Risky	Accounts with a detected risk above informational

Turn a selected filter off to remove it. With no filter selected, the table shows all loaded users.

Viewing user details

Click a user row to open the detail panel. It has four tabs:

• Overview - profile, OU, and security-posture information
• Groups - the user’s group memberships
• Sessions - account and sign-in activity details
• Audit - audit information for the account

Selecting users

If you have write permission, use the checkbox beside a user to select it. The checkbox in the table header selects or clears all visible users. Select users in OU… selects the accounts returned for a chosen OU.

When one or more users are selected, the action toolbar appears above the table.

Available actions

The toolbar and each row’s actions menu offer the actions that apply to the current account state:

Action	Availability and result
Reset password	Generates a new password and opens the one-time reveal flow. See Resetting passwords.
Unlock	Shown when at least one selected account is locked. See Unlocking accounts.
Disable	Shown when at least one selected account is enabled.
Enable	Shown when at least one selected account is disabled.
Move to OU…	Opens an OU picker and moves the selected accounts.
Delete	Permanently deletes the selected accounts. You must type DELETE before the button is enabled.

Each action opens a confirmation dialog. Bulk dialogs list the selected targets so you can review them before continuing. Directory writes are sent through the broker to the connected Agent and produce audit outcomes in the Audit Log.