Overview

The Identity and Access Overview page displays global user and permissions summaries based on overall posture, permissions, risk by user findings, and access distribution.

This page is in Technical Preview status.

Access the Overview

  1. Log in to Sysdig Secure and select Posture >Identity and Access|Overview.
  2. Filter, review, and link to subpages.

Learning Status

The Learning Status panel in the upper right corner indicates several possible states for each registered account:

  • Disconnected: A cloud account is Disconnected if no successful scan has ever occurred.
  • In Progress: A cloud account is In Progress when the account was connected less than 90 days prior. This ensures that the user activity has been profiled for a meaningful amount of time.
  • Completed: If not disconnected nor in progress, the account learning status is Completed.

Filter

Filter by Platform and/or Cloud Account.

Review

Use the graphic displays to get a birds-eye view of the most important identity and access findings in your environment. Each panel highlights a particular focus area and is interactively linked to the appropriate sub-page to take action.

The highlights are grouped by:

Identity Posture overall, featuring Inactive Groups, Roles, Policies, and Resources; Admin Groups and Admin Roles, and Users without MFA (multi-factor authentication).

Permissions featuring top unused permissions to remediate, by Groups, Policies, Roles, and Users

Risk by User Findings

Access Distribution for Read/Write/Admin access for Roles, Users, Groups, and Policies