Adding users and user groups for protection¶

Coro protects users in an organization in the following ways:

• Coro generates tickets for all users, both protected and protectable. These tickets are recorded in the Ticket Log.
• The Actionboard displays activity exclusively for protected users.
• Tickets involving protected users are either automatically resolved by the system or can be addressed by an admin user with sufficient permissions.
• If a ticket involves both protected and protectable users, action is taken only for the protected users. For example, if a phishing email is sent to Bob (protected) and Alice (protectable), Coro moves the email to the designated Suspected folder for Bob, but not for Alice.
• Users can be added for protection by an admin user with sufficient permissions at any time.

To view your protected users and groups, visit the Protected users page. Log into the Coro console, select the gear icon to access the Control Panel, then select Users:

The Protected users page provides a complete list of your protected users, protected user groups, and exclusions:

The Protected Users indicator at the top counts all users you have added to Coro, either individually or as part of a group. Users included in this total are either protected or unprotected (in other words, having been actively excluded from protection - as shown in brackets).

Use this page to view, add, remove, and exclude protected users and user groups.

Navigate between views using the following tabs:

Protected users tab¶

View your protected users here:

Every user is listed by email, with details of how and when they were added. Users can be:

• Added individually (labeled "Added individually")
• Part of a group (with the group name displayed)
• A named Admin (indicated as "Admin")
• Or a combination. For example, "Added individually + 1 group", where a user added individually might also belong to a group.

Use the three-dot menu icon to view options for each user:

• Remove user: Remove this user from protection. See Removing users from protection.
• Add to exclusion: Exclude this user from protection. See Exclusions.

Protected groups tab¶

View your protected groups here:

When you connect an app such as Microsoft 365 or Google Workspace to your Coro Workspace, you give Coro permission to access user information in that app. This can include defined user groups.

Coro offers an option to protect all users within a designated group. If selected, the group is listed on this tab, and its members appear under the Protected Users tab.

Use the three-dot menu icon to view options for each group:

• Remove group: Remove this user group and all associated users from protection. See Removing users from protection.

Exclusions tab¶

View your users excluded from protection here:

To add protection for a large user group while excluding specific members, use the Exclusions tab. This approach prevents the need to add group members individually, avoiding blanket protection on the entire group.

To exclude a protected user:

1. Select + ADD EXCLUSIONS.

   The Add individual users to exclusion list dialog appears:

   

2. Specify one or more email addresses for the users you want to exclude. Press TAB after each address to allow Coro to validate it.

3. Select ADD USERS to confirm.

The Exclusions tab now lists your excluded users.

Adding users to protection¶

Users can be added to protection individually, in groups, or by uploading a comma-separated value (CSV) file of user details.

Adding individual users¶

To add users individually:

1. On the Protected Users tab, select ADD USERS.

2. In the menu, select Add Specific Users:

   

   The Add users to Coro protection dialog appears:

   

3. Enter the email addresses of users you want to protect.

4. Select ADD USERS to confirm.

Adding groups of users¶

To add a group of users:

1. On the Protected Groups tab, select ADD GROUPS.

2. In the menu, select Add specific Groups:

   

   The Add groups to Coro protection dialog appears:

   

3. Enter the names of the user groups you want to protect. Coro attempts to auto-complete group names as you type.

4. Select ADD GROUPS to confirm.

The Protected Groups tab displays the added groups, while the Protected Users tab shows individual members of the group.

Adding users for protection by importing a CSV file¶

Coro can add users for protection through an imported comma-separated (CSV) file containing a list of user email addresses.

To import users from a CSV file:

1. On the Protected Users tab, select ADD USERS.

2. In the menu, select Import from CSV:

   

   The Upload a CSV file dialog appears:

   

3. Select the Upload a CSV file area and locate the required CSV file in the file browser. Alternatively, drag and drop a CSV file into the dialog.

   The uploaded CSV file is displayed in the dialog:

   

4. Select ADD USERS.

   Coro displays a confirmation dialog to show that the import is in progress:

   

5. To acknowledge and complete the process, select GOT IT.

After the import completes, Coro shows a confirmation in the Console and logs the import details in the Activity Log:

Adding protection to all users in a connected app¶

Coro can add protection to all users identified through a connected app in one action.

To apply protection to all users:

1. On the Protected Users tab, select ADD USERS.

2. Select Add Protection to all Users:

   

   The Add protection to all users dialog appears, showing the apps you have connected to your Coro Workspace:

   

3. Choose one of the connected apps.

   Coro presents a confirmation dialog:

   

4. To complete the process, select ADD PROTECTION.

Removing users from protection¶

Users can be removed from protection in one of the following ways:

• Individually or in groups from the Protected Users page.
• Automatically, when a user who is removed from a protected group is not a member of any other protected group.

When a group is removed from protection, a user that belongs to the group is removed from protection only if:

• There are no other protected groups that the user belongs to.
• The user has not been added to protection individually.

When a user is removed from a protected group, the user becomes unprotected only if:

• There is no other protected group that the user belongs to.
• The user has not been added to protection individually.

Removing an individual user¶

To remove a user from protection:

1. Access the Protected users tab.

2. Locate the user's email address in the list.

3. Select the three-dot menu icon, then select Remove user:

   

4. Confirm YES, REMOVE.

The user is removed from protection based on the rules outlined earlier in this section.

Removing a user group¶

To remove a user group from protection:

1. Access the Protected groups tab.

2. Locate the required user group in the list.

3. Select the three-dot menu icon, then select Remove group:

   

4. Confirm YES, DELETE.

The group is deleted and removed from protection based on the rules outlined earlier in this section.