The Accounts Page: Overview

Introduction

Before the page can display cloud accounts, cloud monitoring must be set up for one or more cloud services.

The Accounts page provides a table view into the accounts Field Effect MDR has detected across your networks and cloud services being monitored. Currently, this page supports the following cloud providers: Microsoft 365, Google Workspace, Zendesk and Amazon Web Services (AWS).

In order for accounts to be reported on this page, you must enroll them for cloud monitoring in the Field Effect MDR Portal. Currently, this page supports Microsoft 365, Google Workspace, Zendesk and Amazon Web Services (AWS). Your Google and Microsoft integrations must also have provided Standard access permission. With only Limited access permission, our integration cannot query account information from the provider.

You can also make travel exceptions from the Accounts page. See Making Travel Exceptions from the MDR Portal to learn more.

Columns Available for the Cloud Accounts View

The following columns are available:

Column	Description
Status	Reports the account's Active Response state, which can be either be active, blocked, or locked.
Account Identifier	Typically, the account's email address.
Display Name	Reports the account name, as defined by the end user (example: John Smith).
Source Type	Reports the account's source; local, domain, cloud.
Cloud Provider	Reports which enrolled cloud service the account belongs to.
MFA Status	Reports whether the account has (any type of) MFA enabled or not. NOTE: to report on the MFA status of Microsoft 365 accounts, an Enterprise-level M365 license with Entra P1 is required.
MFA Types	Reports which MFA type(s) are enabled on the account.
Last Synced	The last time at which account synchronized data to the MDR Portal.
Last Changed	The last time Field Effect MDR observed a change with any element in the data.
Created	This column reports the time at which the account was created.
Is Administrator	Reports weather or not (Yes/No) the account has administrator privileges.
Organization	NOTE: This column is only available to Field Effect Partners. This column reports which client organization the account belongs to.
Tenant ID	The ID of the cloud tenant where the account originates from.
Risk	Account risk is based on MFA status (No MFA, Weak MFA, MFA On), and we plan on introducing more risk factors in subsequent releases.

Adjusting and Selecting Columns

Resizing, Moving, and Sorting

You can resize each column by hovering your mouse over the column header. A handle will appear open the right side of the header as your mouse hovers over it. Click and drag the column to you preferred width. your preferred size.

To move the Column to the left or right, click on the hamburger menu (three horizontal lines) and drag it to your preferred position in the table.

To sort the table by a specific column, hover your mouse over the column and click on the vertical arrows. The boldened arrow signifies the current sort (ascending or descending).

Add or Remove a Column

To select which columns are visible in the table, click the + Columns button. The dropdown menu will open, and any checked columns will be visible in the table. Click Apply to confirm your changes.

Searching and Filtering

The Search Bar

If you need to find a specific account, or subset of accounts, you can use the search bar to narrow down this page's results. You can perform keyword searches against the following columns: account identifier, display name, and domain name.

Hostname, Last User, Serial Number, Agent Version, Architecture, Vendor, IP Addresses, Hardware Model, Operating System, and OS Version.

To perform a search, begin by clicking the search bar and selecting the column you would like to search against.

After selecting the column, type in your search query and click the Search icon (or press Enter).The results will be shown in the table. In the example below, the user searched for "doe" against the Display name column, and four results were returned.

Filters

Four commonly used filters (Status, Cloud Provider, MFA Type, Organization) are available beside the search bar, and you can click + More Filters to select from all available filters. These Filters also work with the search bar. In the example below, the user has searched for "Doe" against the Display Name column. They have also selected "Microsoft 365" for the cloud provider filter, further narrowing their search.

Drilling into an Account

You can click on an account for a drilled in view that displays the same information as the table (account details), along with any risk factors that apply to the account. In the example below, the user has not configured MFA for their Microsoft 365 account.