Adding users and user groups for protection¶

Coro provides protection for users in an organization in the following ways:

• Coro generates tickets for all users, both protected and protectable. These tickets are recorded in the Ticket Log.
• The Actionboard displays activity exclusively for protected users.
• Tickets involving protected users are either automatically resolved by the system or can be addressed by an Admin user.
• If a ticket involves both protected and protectable users, action is taken only for the protected users. For example, if a phishing email is sent to Bob (protected) and Alice (protectable), Coro moves the email to the designated Suspected folder for Bob, but not for Alice.
• Users can be added for protection by an Admin user at any time.

To view your protected users and groups, visit the Protected users page. Select the gear icon to access the Control Panel, then select Users:

The Protected users page provides a complete list of your protected users, protected user groups, and exclusions:

In this page, you can view, add, remove, and exclude protected users and user groups. Use the tabs at the top of the page to switch between different views:

Protected users tab¶

Use this tab to view your protected users:

Each user's email address is listed together with details of how and when they were added. Users might have been added individally (shown as "Added individually"), as part of a group (showing the group name), as a named Admin user (shown as "Admin"), or a combination (such as "Added individually + 1 group") where that individually-added user might also be part of a user group.

Use the 3-dot menu icon to view options for each user:

• Remove user: Remove this user from protection. See Removing users from protection.
• Add to exclusion: Exclude this user from protection. See Exclusions.

Protected groups tab¶

Use this tab to view your protected user groups:

When you connect an app such as Microsoft 365 or Google Workspace to your Coro Workspace, you give Coro permission to access user information in that app. This can include defined user groups.

Coro includes an option to add all users within a named group to protection. If you select this, the group is added on this tab and all users within the group appear on the Protected users tab.

Use the 3-dot menu icon to view options for each group:

• Remove group: Remove this user group and all associated users from protection. See Removing users from protection.

Exclusions tab¶

Use this tab to view users that have been excluded from protection:

If you have a large group of users you want to add for protection quickly, but have individuals within that group that you wish to exclude, use the Exclusions tab. This mechanism avoids the scenario in which you are forced to add many individual group members one-at-a-time to avoid applying protection across a whole group.

To exclude a protected user:

1. Select + ADD EXCLUSIONS.

   The Add individual users to exclusion list dialog appears:

   

2. Specify one or more email addresses for the users you want to exclude.

3. To complete the process, select ADD USERS.

Your excluded users are now listed in the Exclusions tab.

Adding users to protection¶

Users can be added to protection in one of the following ways:

• Individually or in groups.
• By uploading a comma-separated value (CSV) file of user details.
• Individually, by selecting the Add to Protection action inside a ticket. See Using the ticket log.

Adding individual users¶

To add users individually:

1. On the Protected Users tab, select ADD USERS.

2. In the menu, select Add Specific Users:

   

   The Add users to Coro protection dialog appears:

   

3. Specify one or more email addresses for the users to whom you want to apply protection.

4. To complete the process, select ADD USERS.

Adding groups of users¶

To add a group of users:

1. On the Protected Groups tab, select ADD GROUPS.

2. In the menu, select Add specific Groups:

   

   The Add groups to Coro protection dialog appears:

   

3. Specify one or more group names for whom you want to apply protection. Coro attempts to auto-complete group names as you type.

4. To complete the process, select ADD GROUPS.

The added groups are displayed on the Protected Groups tab, and individual members of the group are displayed on the Protected Users tab.

Add users for protection by importing a CSV file¶

Coro can add users for protection through an imported comma-separated (CSV) file containing a list of user email addresses.

To import a protected users CSV file:

1. On the Protected Users tab, select ADD USERS.

2. In the menu, select Import from CSV:

   

   The Upload a CSV file dialog appears:

   

3. Select the Upload a CSV file area and locate the required CSV file in the file browser. Alternatively, drag and drop a CSV file into the dialog.

   The uploaded CSV file is displayed in the dialog:

   

4. Select ADD USERS.

   Coro displays a confirmation dialog indicating that the import is in progress:

   

5. To acknowledge and complete the process, select GOT IT.

After the import process is complete, Coro displays an acknowledgement notice in the Console and places an entry in the Activity Log providing details of the import operation:

Adding protection to all users in a connected app¶

Coro can add protection to all users identified through a connected app in one action.

To apply protection to all users:

1. On the Protected Users tab, select ADD USERS.

2. In the menu, select Add Protection to all Users:

   

   The Add protection to all users dialog appears, showing the apps you have connected to your Coro Workspace:

   

3. Choose one of the connected apps.

   Coro presents a confirmation dialog:

   

4. To complete the process, select ADD PROTECTION.

Removing users from protection¶

Users can be removed from protection in one of the following ways:

• Individually or in groups from the Protected Users page.
• Automatically, when a user who is removed from a protected group is not a member of any other protected group.

When removing a user from protection, note the following:

• When a group is removed from protection, a user that belongs to the group is removed from protection only if:

  • There are no other protected groups that the user belongs to.
  • The user has not been added to protection individually.

  Note

  A user can be removed from protection individually ONLY if there is no protected group to which the user belongs.

• When a user is removed from a protected group, the user becomes unprotected only if:

  • There is no other protected group that the user belongs to.
  • The user has not been added to protection individually.

Removing an individual user¶

To remove a user from protection:

1. Access the Protected users tab.

2. Locate the required user email address in the list.

3. Select the 3-dot menu icon, then select Remove user:

   

4. In the confirmation dialog, select YES, REMOVE.

The user is removed from protection in accordance with the rules shown earlier in this section.

Removing a user group¶

To remove a user group from protection:

1. Access the Protected groups tab.

2. Locate the required user group in the list.

3. Select the 3-dot menu icon, then select Remove group:

   

4. In the confirmation dialog, select YES, DELETE.

The group is deleted and all members are removed from protection in accordance with the rules shown earlier in this section.