Starling Identity Analytics & Risk Intelligence Hosted - User Guide

Starling Identity Analytics & Risk Intelligence Getting started Settings Collaborators Collector agents Licensing Rules Risk Verification Reports

Getting started

Topics:

Using the Starling Identity Analytics & Risk Intelligence service

Once you have added the Starling Identity Analytics & Risk Intelligence service to your One Identity Starling organization, as either a trial or paid subscription, you have full access to the Starling Identity Analytics & Risk Intelligence service.

The service is navigated using the title bar along the top of the site, which contains the following links:

  • - This button (displaying the name of the organization you are currently viewing) opens a drop-down menu that allows you to move between organizations associated with your account. See Introduction to Collaborators for related information.
  • - This button (displaying the first name of the account owner) opens a drop-down menu that allows you to select one of the following options:
    • My Services - Clicking this link takes you to the One Identity Starling home page.
    • Sign out - Clicking this link signs you out of One Identity Starling.
  • - This button opens a dialog displaying notifications related to your Starling Identity Analytics & Risk Intelligence service. See Notifications for information on this feature.
  • - This button opens the Settings page where you can manage your entire Starling account.

The main pages available within Starling Identity Analytics & Risk Intelligence are listed in the navigation bar, which is located directly beneath the title bar:

  • Dashboard page - This is the home page of Starling Identity Analytics & Risk Intelligence and provides insight into the current status of your service.
  • Risk - This drop-down menu provides access to pages with information on the accounts associated with your data sources.
  • Rules - This page is used to configure the entitlement classification rules associated with your data sources.
  • Configuration - This drop-down menu provides access to pages for configuring Collector agents, data sources, and Licensing.
  • Collaborators - This page is used to add additional collaborators to your Starling Identity Analytics & Risk Intelligence service.
  • Verification - This page is used to review entitlement verification requests for the high risk users within your data sources.
  • Reports - This page is used to download reports from the Starling Identity Analytics & Risk Intelligence service.

Dashboard page

Upon opening Starling Identity Analytics & Risk Intelligence, you will be directed to the Dashboard page. The Dashboard page is used for navigating through Starling Identity Analytics & Risk Intelligence and also provides a quick overview of the current status of your service. It includes information, links, and Widgets regarding your service. First-time users, and those who have not yet configured Starling Identity Analytics & Risk Intelligence, will see information on what needs to be configured in order to begin using this service.

The following information is displayed at the top of the Dashboard page once data sources have been configured:

Risk Trend

This indicates the current risk trend by showing whether or not there has been an increase (), decrease (), or no change () to the level of risk within the set time period. This is calculated by first checking to see if there was an increase or decrease to the number of accounts. If there was no change to the number of accounts being reported as high risk then changes to high risk entitlements are considered. You can use the Filter By drop-down to change the amount of time to consider when calculating the risk trend.

High Risk Accounts

This displays the current number of high risk accounts associated with data sources that have an active license. The total number of evaluated accounts associated with those data sources appears beneath the high risk accounts value. Clicking this will open the High Risk Accounts page.

High Risk Entitlements

This displays the current number of high risk entitlements associated with data sources that have an active license. The total number of evaluated entitlements associated with those data sources appears beneath the high risk entitlements value.

Filter By

This drop-down is used to set the period of time for which data will be displayed (by default the last 15 days). The Risk Trend indicator and any widgets that display data based on time period will update according to the selection. The High Risk Accounts and High Risk Entitlements counts are not impacted by this filter.

Widgets

On the bottom of the Starling Identity Analytics & Risk Intelligence Dashboard page are widgets offering a brief overview of information regarding your service. These widgets vary in style based on the type of information they display. The following are the types of widgets and how they are used:

NOTE: The Filter By drop-down at the top of the page is used to set the period of time for which data will be displayed (by default, the last 15 days). The Risk Trend indicator and any widgets that display data based on time period will update according to the selection.

  • Graphs: These widgets are graphs that can be filtered to show specific time periods, and hovering over a data point will display the specifics about what occurred on the corresponding date.
  • Lists: These widgets are lists that show changed data and provide links to the pages where these changes can be viewed in full. For example, new high risk accounts may have been found during an evaluation, so information on which accounts and a link to the high risk accounts page will appear in the widget.
  • Pie charts: These widgets are circular and display the portion each element takes up of the total. You can remove data from the chart by clicking the name of the element within the legend. Clicking the name a second time will add the data back into the chart.

Some examples of the widgets that may be displayed on this page:

NOTE: All widgets that display information based on date use UTC.

  • Metric Totals
  • High Risk Accounts - By Rule
  • Increased High Risk Accounts
  • New High Risk Accounts
  • High Risk Accounts - By Data Source
  • High Risk Accounts - By Module (this chart will not display if only one data source is present)
Related Documents