Protected users

The Protected Users page provides a complete list of the protected users in your workspace.

Important

Managed Service Provider (MSP) admin users with sufficient permissions can also use the global protected users page to view and manage protected users across parent (channel) and child workspaces.

To access the Protected Users page, sign in to the Coro console and select the Protected Users dashboard panel from the Actionboard:

Protected Users list

The Protected Users page appears:

Users list

On this page, you can:

  • View the full list of users, with indicators showing whether a user has outstanding unresolved tickets.
  • Find users matching a specified search string.
  • Filter the user list by selected criteria.
  • Select a specific user to show more details, including:
    • Their email address and any aliases.
    • The cloud applications within which they are protected.
    • Labels that apply to the user.
    • If Coro's Delete external auto-forwarding rules Email Security feature applies to this user.
    • Open tickets connected with this user.
    • Devices associated with the user.
    • An activity log summary filtered to show only those events involving this user.
  • Perform Actions on a user.
note

For users connected via Microsoft 365 or Google Workspace, Coro shows an additional indicator for whether cloud application connections are secured with Multi-Factor Authentication (MFA). In these cases, Coro shows MFA ENABLED or MFA NOT ENABLED next to the application name:

MFA enabled or disabled indicators

Use the More filters dropdown filter to display only users that match the selected MFA criteria.

User list filters

Coro provides the following filters for narrowing down your user list to specified criteria:

  • Cloud Apps : Filter by connected cloud application.
  • Status : Filter by Suspended or Active user status.
  • Labels : Show only users assigned one of the selected user labels .
  • More filters : Includes:
    • MFA (Multi factor authentication) : For Microsoft 365 and Google Workspace, show only users whose connection is secured with MFA ( enabled ), or not secured ( not enabled ).
    • Delete auto-forward rule : Show only users affected ( enabled ), or not affected ( disabled ), by Coro's Delete external auto-forwarding email rules feature.

User actions

Coro provides the following Actions on the currently selected user:

Action Description
Close all tickets Close all open tickets associated with this user.
Request user to sign into all cloud apps Send a request to the user for them to sign-in to their cloud applications, triggering the authentication process to confirm the user's identity.
Suspend user from all cloud apps Send an instruction to all relevant connected cloud applications to suspend the user account.
Add label Add a user label to the selected users.