User details: account, security, licenses, and devices

Tabs

Tab	What it shows	What you can do
Overview	Name, UPN, email, job title, department, manager, office, last sign-in, and status, plus links to the user’s sites, groups, roles, and licenses.	Open any linked site, group, or license.
Account	Editable profile fields and account settings.	Edit fields, block or unblock sign-in, hide from the global address list (GAL), or delete the user.
Activity	The user’s audit trail grouped by category: Sign-in, Role change, License, Group, File, Share, Mail, and Device.	Filter by category, export to CSV or JSON, or open an event in the audit log.
Security	Registered authentication methods, conditional access policies that apply, and sign-in history with risk, result, and location.	Require MFA re-registration, disable a method, or force sign-in again.
Licenses	Every assigned license with its cost.	Assign, unassign, or swap a license. CtrlConnect warns you if a swap removes features the user relies on.
Roles	Entra directory roles and the groups that grant them, with eligible and active assignments and any PIM schedule.	Activate or deactivate an eligible role, or change a role assignment.
Devices	Enrolled devices with model, OS, compliance state, and last check-in.	Wipe, lock, retire, or sync a device, or open it in Intune.
Groups	Security and Microsoft 365 group memberships, direct and inherited.	Add to or remove from a group.
Mail	Mailbox size, forwarding rules, delegates, and recent sign-ins.	Disable forwarding, remove a delegate, or open the mailbox in Exchange admin.
Sites	Every SharePoint site and OneDrive the user can access, and how they got access (directly, through a group, or through a link).	Open a site, copy the access path, or remove the user from a site.

To investigate why mail is being forwarded outside your organization, check the Mail tab for forwarding rules and delegates.

Actions that change the account

Every action below asks for confirmation and is recorded in the audit log.

Block or unblock sign-in: you’re asked for a reason.

Hide from GAL: removes the user from the address list. You can undo it.

Reset password: the user must set a new password at next sign-in.

Revoke sessions: signs the user out on every device.

Delete user: the user can be restored for 30 days.

Assign or unassign a license: shows the cost before you confirm.

Change role: high-impact roles need an extra confirmation.

Get started

Monitor and respond

Users and workspaces

Reports

Lifecycle and reviews

Governance

Administration

User details: account, security, licenses, and devices

Tabs

Actions that change the account

​Tabs

​Actions that change the account

Tabs

Actions that change the account