> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/aws-identities/users.md).
# Users
Open **Unified Identities › Human Identities**, filter **Providers** to **AWS › IAM User**, then select a row to open its details.
Users
## User Details
Details page contains the `Risk` and `Exposure Point` of the user, and the Information and Issues panes.
{% hint style="info" %}
You can analyze the object in the [Graph](/forestall/visualize/visualize.md) by clicking the **Graph »** button next to the `Information` title. For a shadow admin the button reads **Admin Path »** and opens the shortest path to admin objects (see [Object Detail Pages](/forestall/unified-identities.md#object-detail-pages)).
{% endhint %}
User Details
## Information
Information Pane can contain different badges to highlight important attributes.
| Badge | Description |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| Privileged | Indicates that the object is Privileged. |
| Inactive | Indicates that neither the password nor an active access key has been used within the inactivity threshold of the scan policy. |
| MFA Enabled | Indicates that multi-factor authentication is enabled for the user. |
| Console Access | Indicates that the user has AWS Management Console access. |
| Tier 0 / Tier 2 | Indicates the tier of the object. |
| Shadow | Indicates that the object can compromise admin objects with at least one attack path. |
Information Pane contains Details, Groups, Policies and Access Keys tabs.
## Details
Details tab contains attributes below about the IAM user object.
| Attribute | Description |
| -------------------- | --------------------------------------------------------------------------------------- |
| Username | The IAM username used to identify and sign in to AWS services. |
| User ID | The unique identifier assigned to the IAM user by AWS. |
| ARN | The Amazon Resource Name that uniquely identifies the IAM user across AWS. |
| Account ID | The AWS account ID that the IAM user belongs to. |
| Path | The path associated with the IAM user, used for organizational grouping. |
| Region | The AWS region type associated with the account (e.g., Commercial, GovCloud, China). |
| Created | The date and time when the IAM user was created. |
| Password Last Used | The most recent date and time the user signed in using a password; blank if never used. |
| Has Password | Indicates whether the user has a console login password configured. |
| MFA Enabled | Indicates whether multi-factor authentication is enabled for the user. |
| Console Access | Indicates whether the user is allowed to sign in to the AWS Management Console. |
| Permissions Boundary | The managed policy used to set the maximum permissions for the user; blank if not set. |
| Source Tenant | The name of the tenant or configuration source from which the user was scanned. |
| Object ID | The unique identifier of the user object, equivalent to the IAM User ID. |
## Groups
Groups tab contains a list of IAM groups that the user is a member of. This list also contains the Member Count column.
Groups
## Policies
Policies tab contains a list of IAM policies attached to the user, including both managed and inline policies. This list also contains the AWS Managed and Admin Privileges columns to identify the scope and risk level of each policy.
Policies
## Access Keys
Access Keys tab contains a list of programmatic access keys associated with the user. This list contains the Access Key ID, Status, Created, Last Used and Last Service columns to identify whether the keys are active and recently used.
Access Keys
## Issues
Issues pane contains identified security issues on the IAM user object.
