"Summary" Dashboard in Endpoint Privilege Management Reporting

The Summary dashboard displays bar charts for the most important activity that has occurred in the time period defined by the quick filter. The legends to the right of the charts display totals for the shown activities. You can use this information to inform Workstyle development or to show anomalous user behavior in your organization.

A warning message might display on the Summary page if there is a backlog of event processing. Verify your database configuration is set up to manage processing a large number of events.

The Summary dashboard includes the following tables:

Table Description

Applications Discovered

The total number of newly discovered Applications filtered by the type of user rights required:

  • Admin rights required
  • Standard rights required

Discovered applications are shown in the Applications table. Click the number next to the OS icon to show details.

User Requests

The total number of User Requests filtered by the type of request:

  • Blocked (user provided reason)
  • User canceled challenge

Click the chart or legend to open the Requests All report with the Request Type filter applied.

Admin logons, by users, on endpoints

Summarizes the number of admin logons, the number of users, and the number of endpoints used.

Admin Logons are shown in the Administration table. Click the number next to the OS icon to show details.

Trusted Application Protection

The number of Trusted Application (TAP) incidents, how many users, and how many endpoints were affected.

TAP events are shown in the Incidents table. Click the number next to the OS icon to show details.

Attempts to modify privileged groups

The number of blocked attempts to modify privileged groups.

Attempts to modify privileged groups are shown in the Administration table. Click the number next to the OS icon to show details.

Application run from external sources

The number of applications run from external sources.

Applications Run from external sources are shown in the Applications table. Click the number next to the OS icon to show details.

Activities blocked

The number of applications blocked.

Click the chart or legend to open the Target Types All report with the Filter by Action filter applied.

Applications used On-Demand privileges

The number of applications launched using on-demand privileges.

Click the chart or legend to open the Target Types All report with the Shell or Auto filter applied. Shell indicates that on-demand privileges were used.

UAC matches

The number of applications that triggered User Account Control (UAC).

UAC events are shown in the Incidents table. Click the number next to the OS icon to show details.

Hosts audited

The number of endpoints that were audited.

The graph shows you the times since the most recent events.

Click the icon, number, or text to open the Deployments Dashboard. Click the i icon to open the Events All report

Events audited

The number of events that were audited.

The graph shows you the number of each type of event.

Click the icon, number, or text to open the Events All report.