User Summary

You can view all the details for a user.

Go to Overview > People > Users and click the user you want to view details for.

The Summary tab in a user's details page shows a summary of the following:

  • The user's security status, administration role, if any, and account details.
  • Recent events on the user's devices.
  • Mailboxes associated with the user.
  • Devices associated with the user.
  • Policies that apply to the user.
  • Groups that the user belongs to.
  • Logins.

You can find details of each below.

The security status and account details are in the left-hand pane. This pane is always shown, even when you click the other tabs on this page.

You can click on the other tabs for more on Devices, Events, and Policies.

Health Status

In the left-hand pane, an icon shows you whether the user has security alerts on any of their devices:



Green check mark

Green check mark if there are low-priority alerts or no alerts.

Orange warning sign

Orange warning sign if there are medium-priority alerts.

Red warning sign

Red warning sign if there are high-priority alerts.

You can see which devices have alerts in the Devices tab.

A padlock icon shows that the user has been imported from Active Directory.

A badge shows the user's assigned administration role. Click on the role name to view the settings for the role. See Administration Roles.

Note Role information is only displayed for administration roles.

Account details

In the left-hand pane, you can modify or delete the user's account.

Note If a user has been imported from Active Directory, you cannot change the account details. However, you can add the user to a new Sophos Central group or add another login.

Modify the account

  1. Click Edit and enter the following settings:

    First & Last name: Enter the name of the user. Do not include a domain name.

    Role: Select a role for the user. Choose from: Super Admin, Admin, Help Desk, Read-only, or User.

    Restriction You can only see the Role option and assign administrator roles if you are a Super Admin.
    Note You cannot amend your own administration role.
    Note Anyone with a User role only has access to the Self Service Portal.

    Email Address: Enter the email address of the user.

    Exchange Login (optional): Enter the Exchange account name of the user.

    Note In Sophos Mobile policies, you can use the placeholder %_USERNAME_% to refer to this setting.

    Add to groups: Select one of the available user groups and use the picker arrows to move it to the assigned groups.

    Email Setup Link: Select this if you want to send the user an email with links that enable them to protect their own devices. If your license includes more than one type of protection, select those the user needs.

    Note The user needs administrative privileges and internet access in order to protect their computer.
    Note Web Gateway provides more advanced web security for computers than Endpoint Protection. You can install it alongside Endpoint Protection or on its own.
  2. Click Save.

Delete the account

To delete the account, click Delete User in the left-hand pane. Logins assigned to this user can afterward be assigned to another user.

Restriction You cannot delete users who have an assigned administration role.

Multi-factor authentication

If the user is an admin, the left-hand pane shows whether multi-factor authentication (MFA) is enabled for them. If it is enabled, the admin must use another form of authentication, as well as their user name and password, to sign in.

If you're a Super Admin, you can edit the settings as follows:

Click Reset to let the admin set up their MFA sign-in details again.

Click MFA Settings to go to a page where you can enable or disable multi-factor authentication for the admin.

Recent Events

This lists recent events on the user's devices.

For a full list, click the Events tab.


This lists all email addresses, including distribution lists and public folders, associated with the user. Primary indicates the user's primary email address. Owner indicates the user controls a distribution list or public folder.

For full details, click an email address.


This shows a summary of the devices associated with the user.

Click the device name to go to the device's details page for more information..

Click Actions to carry out any of the same actions that are available on the device's details page (for example, Scan Now and Update Now for a computer).

For full details of the user's devices, click the Devices tab.


This shows a summary of the policies applied to the user.

The list shows the policy name, whether the policy is enabled or not, and icons that indicate the features included in the policy.

Click on a policy name to view and edit the user policy.

Note Editing the policy affects all users to which this policy is applied.

For full details of all the policies applied to this user, click the Policies tab.

For more information on policies, see About Policies.


This shows the groups the user belongs to.

Click on a group name to see details of the group.

Click Edit (on the right) to change the groups the user belongs to.


This shows the user's logins.

Click Edit (on the right) to change the logins assigned to the user.