Skip to main content

Top Identity Risks

in preview

Entitlement management is currently in preview.

Introduction to the Top identity risks tab​

The Top identity risks tab provides a list of the top risks found during the selected time range.

To reach the Top identity risks tab, go to Entitlements > Top identity risks.

  • Use the filters or search if you want to display a subset of top identity risks. By default, the tab displays the most severe identity risks in descending order from the latest week.
  • Click an identity from the list and examine its details that display to the right.
  • Click the information icon for each risk to display an explanation about why it's an identity risk factor.
  • Click Investigate to open the identity's full details in the Explorer tab.
  • Save and share the view.

You can also view identity risks in the Top risky paths with admin privilege role table on the Top work items page. The attack paths listed here use admin privilege identities to potentially expose your cloud data assets.

Top 25 at risk identities​

Click the icons to download the table as a CSV, select columns, and search for specific text in the columns.

Overall risk severity​

Each identity in the list has an overall risk severity. The overall risk severity is the highest severity of the risks that are associated with the identity. To lower the risk severity, address all of the highest severity risks. This would lower the risk severity to the highest severity of the remaining risks.

For example, if an identity has a risk severity of critical and there are two critical risks and three medium risks, fixing all critical risks would lower the overall risk severity to medium.

Identity details​

To view the identity in a resource context, click the View in Resource Explorer icon (next to the Principal ID). To view access key details, hover over the access key. For risk details, click individual risk information icons.

Save and share Top identity risk information​

  • Click the Save view icon Save view in the top right corner to save the current view. This lets you access the saved view later through the Open view icon Open view.
  • You can also copy the link to the current view by clicking the Copy link icon Copy link. You can then share that link with others, so they can see the same view.