Finding at-risk users
At-risk users are users in your organization that have been flagged for behavior that seems out of the ordinary, mostly when signing in. It could be that the user's credentials have been compromised (showing suspicious activity consistent with such events), or perhaps just a false positive when a user is signing in when traveling. In this recipe, you'll learn how to find users that have been identified as at-risk and learn how to address them.
Getting ready
You need to be a global or security administrator or reader to complete this recipe.
How to do it…
- Go to the Microsoft 365 Security admin center at https://security.microsoft.com.
- Select Reports from the left-hand navigation menu and click Users at risk:
Figure 13.1 – Users at risk link on the Reports page of the Microsoft 365 Security admin center
- Select an at-risk user to view more details:
Figure 13.2 – A selected at-risk user
- A Details panel will...
