User Summary

Health Status

In the left-hand pane, an icon shows you whether the user has security alerts on any of their devices:

You can see which devices have alerts in the Devices tab.

A padlock icon shows that the user has been imported from Active Directory.

A badge shows the user's assigned administration role. Click on the role name to view the settings for the role.

Account details

In the left-hand pane, you can modify or delete the user's account.

Modify the account

1. Click Edit and enter the following settings:

   First & Last name: Enter the name of the user. Do not include a domain name.

   Role: Select a role for the user. Choose from: Super Admin, Admin, Help Desk, Read-only, or User.

   Restriction You can only see the Role option and assign administrator roles if you are a Super Admin.
   Note You cannot amend your own administration role.
   Note Anyone with a User role only has access to the Self Service Portal.

   Email Address: Enter the email address of the user.

   Exchange Login (optional): Enter the Exchange account name of the user.

   Note In Sophos Mobile policies, you can use the placeholder %_USERNAME_% to refer to this setting.

   Add to groups: Select one of the available user groups and use the picker arrows to move it to the assigned groups.

   Email Setup Link: Select this if you want to send the user an email with links that enable them to protect their own devices. If your license includes more than one type of protection, select those the user needs.

   Note The user needs administrative privileges and internet access in order to protect their computer.
   Note Web Gateway provides more advanced web security for computers than Endpoint Protection. You can install it alongside Endpoint Protection or on its own.
2. Click Save.

Delete the account

To delete the account, click Delete User in the left-hand pane. Logins assigned to this user can afterward be assigned to another user.

Multi-factor authentication

If the user is an admin, the left-hand pane shows whether multi-factor authentication (MFA) is enabled for them. If it is enabled, the admin must use another form of authentication, as well as their user name and password, to sign in.

If you're a Super Admin, you can edit the settings as follows:

Click Reset to let the admin set up their MFA sign-in details again.

Click MFA Settings to go to a page where you can enable or disable multi-factor authentication for the admin.

Recent Events

This lists recent events on the user's devices.

For a full list, click the Events tab.

Mailboxes

This lists all email addresses, including distribution lists and public folders, associated with the user. Primary indicates the user's primary email address. Owner indicates the user controls a distribution list or public folder.

For full details, click an email address.

Devices

This shows a summary of the devices associated with the user.

Click the device name to go to the device's details page for more information..

Click Actions to carry out any of the same actions that are available on the device's details page (for example, Scan Now and Update Now for a computer).

For full details of the user's devices, click the Devices tab.

Policies

This shows a summary of the policies applied to the user.

The list shows the policy name, whether the policy is enabled or not, and icons that indicate the features included in the policy.

Click on a policy name to view and edit the user policy.

For full details of all the policies applied to this user, click the Policies tab.

Groups

This shows the groups the user belongs to.

Click on a group name to see details of the group.

Click Edit (on the right) to change the groups the user belongs to.

Logins

This shows the user's logins.

Click Edit (on the right) to change the logins assigned to the user.