Skip to main content

Top Identity Risks

Introduction to Top Identity Risks​

The Top identity risks page provides a list of the top risks found during the selected time range.

To reach the Top identity risks tab, go to Identities > Top identity risks.

  • Use the filters or search if you want to display a subset of top identity risks. By default, the page displays the most severe identity risks in descending order from the latest week.
  • Click an identity from the list and examine its details displayed to the right.
  • Click the information icon for each risk to display an explanation about why it is an identity risk factor.
  • Click Investigate to open the identity's full details in the Explorer page.
  • Save and share the view.

You can also view identity risks in the Top risky paths with admin privilege role table on the Top work items page. The attack paths listed here use admin privilege identities to potentially expose your cloud data assets.

Top at Risk Identities​

Click the icons to download the table as a CSV, select columns, and search for specific text in the columns.

Risk Severity​

Each identity in the list has an overall risk severity. The overall risk severity is the highest severity of the risks that are associated with the identity. To lower the risk severity, address all of the highest severity risks. This would lower the risk severity to the highest severity of the remaining risks.

For example, if an identity has a risk severity of critical and there are two critical risks and three medium risks, fixing all critical risks would lower the overall risk severity to medium.

Identity Details​

To view the identity in a resource context, click the View in Resource Explorer icon (next to the Principal ID). To view access key details, hover over the access key. For risk details, click individual risk information icons.

Save and Share a View​

When the page displays your desired identity risks, click Save or Create view in the top right corner. This allows you to access the saved view later. You can also copy the link to a saved view by opening the list of saved views and clicking the Share view icon of the view you want to share. You can then send that link to others so they can see the same view. For more details about saved views, refer to Views Management.

Last updated on