> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ctrlconnect.nl/llms.txt
> Use this file to discover all available pages before exploring further.

# User details: account, security, licenses, and devices

> Use the user details tabs to edit a profile, review sign-ins and MFA, change licenses and roles, manage devices, groups, mail, and site access.

The user details page shows everything CtrlConnect knows about one person. Open it by clicking a user in the [users directory](/users/directory). Changes you make on one tab show up on the other tabs right away.

## Tabs

| Tab | What it shows | What you can do |
| - | - | - |
| **Overview** | Name, UPN, email, job title, department, manager, office, last sign-in, and status, plus links to the user's sites, groups, roles, and licenses. | Open any linked site, group, or license. |
| **Account** | Editable profile fields and account settings. | Edit fields, block or unblock sign-in, hide from the global address list (GAL), or delete the user. |
| **Activity** | The user's audit trail grouped by category: Sign-in, Role change, License, Group, File, Share, Mail, and Device. | Filter by category, export to CSV or JSON, or open an event in the [audit log](/audit-log). |
| **Security** | Registered authentication methods, conditional access policies that apply, and sign-in history with risk, result, and location. | Require MFA re-registration, disable a method, or force sign-in again. |
| **Licenses** | Every assigned license with its cost. | Assign, unassign, or swap a license. CtrlConnect warns you if a swap removes features the user relies on. |
| **Roles** | Entra directory roles and the groups that grant them, with eligible and active assignments and any PIM schedule. | Activate or deactivate an eligible role, or change a role assignment. |
| **Devices** | Enrolled devices with model, OS, compliance state, and last check-in. | Wipe, lock, retire, or sync a device, or open it in Intune. |
| **Groups** | Security and Microsoft 365 group memberships, direct and inherited. | Add to or remove from a group. |
| **Mail** | Mailbox size, forwarding rules, delegates, and recent sign-ins. | Disable forwarding, remove a delegate, or open the mailbox in Exchange admin. |
| **Sites** | Every SharePoint site and OneDrive the user can access, and how they got access (directly, through a group, or through a link). | Open a site, copy the access path, or remove the user from a site. |

> [!TIP]
>
> To investigate why mail is being forwarded outside your organization, check the **Mail** tab for forwarding rules and delegates.

## Actions that change the account

Every action below asks for confirmation and is recorded in the audit log.

* **Block or unblock sign-in**: you're asked for a reason.
* **Hide from GAL**: removes the user from the address list. You can undo it.
* **Reset password**: the user must set a new password at next sign-in.
* **Revoke sessions**: signs the user out on every device.
* **Delete user**: the user can be restored for 30 days.
* **Assign or unassign a license**: shows the cost before you confirm.
* **Change role**: high-impact roles need an extra confirmation.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.