Account viewers

Account viewers provide a unified view of individual accounts data. You can determine identifier and ownership context for an account, as well as understand how many directory groups the account sits within, both directly and inherited.

An example Accounts entity viewer

Understanding ownership of an account and how it might be inheriting its permissions is useful when thinking about the principle of least privilege. Does every account have an owner, and is it being actively used or could it be considered stale and a candidate for disabling / deleting? Is the owner still employed by the organization?

An example Accounts entity details page

A range of additional tabs exist for Accounts viewers, depending which CCDs your organization uses. For example:

• Application: Applications to which this account has access.
• Device: Devices that this account can use.
• Group: Groups to which this account belongs.