Users

The Users page shows AI activity grouped by person. It shows which users are interacting with which AI applications and agents, as well as their intentions, usage patterns, and risk profiles.

The importance of this feature lies in its ability to investigate user-specific behaviors and ensure compliance with company policies and security requirements.

Note: This page shows activity. To add or remove user accounts and assign roles, use Users under Administration.

Step-by-Step Instructions

Filtering Users Conversations

Access the Users page from the sidebar menu.
The table opens on your deployment's default date range (Last 7 days on most deployments). Each row summarizes one user's activity in that range.
Use the filters at the top of the page to set the date range, Group, User and Application.

The Users table, with columns for User, Latest Intention, Highest Severity, Conversations, Applications, Agent Actions, Agents, Alerts and Last Activity.

Table columns

Column	What it shows
User	The person's display name, with their department underneath when it's known.
Latest Intention	The most recently detected intention in the person's prompts.
Highest Severity	The highest severity of any alert the person triggered in the selected range, or None.
Username	The person's username. Hidden by default.
Email	The person's email address. Hidden by default.
Conversations	The number of conversations for that person in the selected range.
Applications	How many different AI applications the person used.
Agent Actions	How many agent tool executions are attributed to the person.
Agents	How many different agents the person used.
Alerts	How many alerts the person's activity raised. Hover the count to see it split by severity.
Last Activity	When the person's most recent activity happened.

Highest Severity covers the whole selected range. It isn't the severity of the most recent conversation.

Use the column picker to show or hide columns. Username and Email are hidden by default.

The column picker, listing the table's columns, with Username and Email unchecked.

The table shows 50 users per page. Use the page controls at the bottom of the table to move between pages.

Sorting the Table

Select the Conversations or Last Activity column header to sort the table by that column. Select it again to sort in the reverse order. The other columns can't be sorted.

Investigating User Conversations

Now let’s try an investigation workflow.

Find the user you want to look at. Sort by Conversations to bring the most active users to the top, or use the User filter.
Select the user's row. The User Details drawer opens beside the table, and your filters stay in place.
Read the Overview tab: the person's email, username and department, their top intentions, top alerts and top applications.
Use the Alerts, Conversations and Applications tabs to see that person's alerts, conversations and application usage in the selected range.

The User Details drawer on the Overview tab, with email, username and department, top intentions, top alerts and top applications.

Note: Conversations from VIP users are restricted. If you aren't allowed to see a VIP user's conversations, the drawer shows "Cannot see conversations from VIP users" in place of their top intentions and on the Conversations tab. Their alerts stay visible.

Export the user rollup

Select Download above the table, then Download CSV or Download JSON. The file is saved as users.csv or users.json.

If you selected rows with the checkboxes, only those rows are exported. Otherwise the export holds every row on the current page, not the full dataset. To export a different set, change your filters or go to the page you need first.

Users Step-by-Step Instructions Filtering Users Conversations Table columns Sorting the Table Investigating User Conversations Export the user rollup