Finding at-risk users
At-risk users are users in your organization that have been flagged for behavior that seems out of the ordinary, mostly when signing in. It could be that the user's credentials have been compromised (showing suspicious activity consistent with such events), or perhaps just a false positive when a user is signing in when traveling. In this recipe, you'll learn how to find users that have been identified as at-risk and learn how to address them.
You need to be a global or security administrator or reader to complete this recipe.
How to do it…
- Go to the Microsoft 365 Security admin center at https://security.microsoft.com.
- Select Reports from the left-hand navigation menu and click Users at risk:
- Select an at-risk user to view more details:
- A Details panel will...