Skip to content

Adding users and user groups for protection

Coro provides protection for users in an organization in the following ways:

  • Coro generates tickets for all users, both protected and protectable. These tickets are recorded in the Ticket Log.
  • The Actionboard displays activity exclusively for protected users.
  • Tickets involving protected users are either automatically resolved by the system or can be addressed by an Admin user.
  • If a ticket involves both protected and protectable users, action is taken only for the protected users. For example, if a phishing email is sent to Bob (protected) and Alice (protectable), Coro moves the email to the designated Suspected folder for Bob, but not for Alice.
  • Users can be added for protection by an Admin user at any time.

To view your protected users and groups, visit the Protected users page. Select the gear icon to access the Control Panel, then select Users:

Selecting Users from the Control Panel

The Protected users page provides a complete list of your protected users, protected user groups, and exclusions:

The Protected users page

In this page, you can view, add, remove, and exclude protected users and user groups. Use the tabs at the top of the page to switch between different views:

Protected users tab

Use this tab to view your protected users:

Protected users tab

Each user's email address is listed together with details of how and when they were added. Users might have been added individally (shown as "Added individually"), as part of a group (showing the group name), as a named Admin user (shown as "Admin"), or a combination (such as "Added individually + 1 group") where that individually-added user might also be part of a user group.

Use the 3-dot menu icon to view options for each user:

Protected users menu options

Protected groups tab

Use this tab to view your protected user groups:

Protected groups tab

When you connect an app such as Microsoft 365 or Google Workspace to your Coro Workspace, you give Coro permission to access user information in that app. This can include defined user groups.

Coro includes an option to add all users within a named group to protection. If you select this, the group is added on this tab and all users within the group appear on the Protected users tab.

Use the 3-dot menu icon to view options for each group:

Protected groups menu options

Exclusions tab

Use this tab to view users that have been excluded from protection:

Exclusions tab

If you have a large group of users you want to add for protection quickly, but have individuals within that group that you wish to exclude, use the Exclusions tab. This mechanism avoids the scenario in which you are forced to add many individual group members one-at-a-time to avoid applying protection across a whole group.

To exclude a protected user:

  1. Select + ADD EXCLUSIONS.

    The Add individual users to exclusion list dialog appears:

    Add exclusion dialog

  2. Specify one or more email addresses for the users you want to exclude.

  3. To complete the process, select ADD USERS.

Note

You cannot exclude Admin users from protection. If you specify an Admin user email, the user account shows as crossed-out in the Exceptions tab with the message Admin not excluded.

Your excluded users are now listed in the Exclusions tab.

Adding users to protection

Users can be added to protection in one of the following ways:

  • Individually or in groups.
  • By uploading a comma-separated value (CSV) file of user details.
  • Individually, by selecting the Add to Protection action inside a ticket. See Using the ticket log.

Adding individual users

To add users individually:

  1. On the Protected Users tab, select ADD USERS.

  2. In the menu, select Add Specific Users:

    Add users menu

    The Add users to Coro protection dialog appears:

    Add users dialog

  3. Specify one or more email addresses for the users to whom you want to apply protection.

  4. To complete the process, select ADD USERS.

Adding groups of users

To add a group of users:

  1. On the Protected Groups tab, select ADD GROUPS.

  2. In the menu, select Add specific Groups:

    Add groups menu

    The Add groups to Coro protection dialog appears:

    Add groups dialog

  3. Specify one or more group names for whom you want to apply protection. Coro attempts to auto-complete group names as you type.

  4. To complete the process, select ADD GROUPS.

The added groups are displayed on the Protected Groups tab, and individual members of the group are displayed on the Protected Users tab.

Note

The ADD GROUPS menu also contains a link to Add Protection to All Users. For more information about this option, see Adding protection to all users in a connected app.

Add users for protection by importing a CSV file

Coro can add users for protection through an imported comma-separated (CSV) file containing a list of user email addresses.

Note

To avoid validation issues, Coro provides a downloadable template file linked from the Upload a CSV file dialog.

When creating a CSV file, consider the following:

  • Each email address is specified on a separate line.
  • The first column of the CSV file must contain the valid email addresses of all users to be added to Coro protection. Additional columns and invalid entries are ignored.
  • The maximum CSV file size is 5 MB.
  • A maximum of 100,000 records are permitted.

To import a protected users CSV file:

  1. On the Protected Users tab, select ADD USERS.

  2. In the menu, select Import from CSV:

    Import a users CSV file

    The Upload a CSV file dialog appears:

    Upload a CSV file dialog

  3. Select the Upload a CSV file area and locate the required CSV file in the file browser. Alternatively, drag and drop a CSV file into the dialog.

    The uploaded CSV file is displayed in the dialog:

    An Uploaded CSV file

  4. Select ADD USERS.

    Coro displays a confirmation dialog indicating that the import is in progress:

    Import in progress message

  5. To acknowledge and complete the process, select GOT IT.

After the import process is complete, Coro displays an acknowledgement notice in the Console and places an entry in the Activity Log providing details of the import operation:

Activity Log entry

Adding protection to all users in a connected app

Coro can add protection to all users identified through a connected app in one action.

To apply protection to all users:

  1. On the Protected Users tab, select ADD USERS.

  2. In the menu, select Add Protection to all Users:

    Add users menu

    The Add protection to all users dialog appears, showing the apps you have connected to your Coro Workspace:

    Select app dialog

  3. Choose one of the connected apps.

    Coro presents a confirmation dialog:

    Add all users for M365

  4. To complete the process, select ADD PROTECTION.

Removing users from protection

Users can be removed from protection in one of the following ways:

  • Individually or in groups from the Protected Users page.
  • Automatically, when a user who is removed from a protected group is not a member of any other protected group.

When removing a user from protection, note the following:

  • When a group is removed from protection, a user that belongs to the group is removed from protection only if:

    • There are no other protected groups that the user belongs to.
    • The user has not been added to protection individually.

    Note

    A user can be removed from protection individually ONLY if there is no protected group to which the user belongs.

  • When a user is removed from a protected group, the user becomes unprotected only if:

    • There is no other protected group that the user belongs to.
    • The user has not been added to protection individually.

Removing an individual user

To remove a user from protection:

  1. Access the Protected users tab.

  2. Locate the required user email address in the list.

  3. Select the 3-dot menu icon, then select Remove user:

    Protected users menu remove option

  4. In the confirmation dialog, select YES, REMOVE.

The user is removed from protection in accordance with the rules shown earlier in this section.

Removing a user group

To remove a user group from protection:

  1. Access the Protected groups tab.

  2. Locate the required user group in the list.

  3. Select the 3-dot menu icon, then select Remove group:

    Protected groups menu remove eption

  4. In the confirmation dialog, select YES, DELETE.

The group is deleted and all members are removed from protection in accordance with the rules shown earlier in this section.