> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/github-identities/users.md). # Users The Users page provides a list of enumerated GitHub users in the scanned environment. The list contains the Name, Privileged, Shadow Admin, Inactive, Outside Collaborator, Risk Score, Exposure Point and Issue Counts of each user object. A GitHub account is a single global identity that can belong to several scanned organizations. Each user therefore appears once in this list, and the organizations it belongs to are shown on the details page.

### User Details Details page contains the Risk Score of the user, Exposure Point, Information and Issues panes. You can analyze objects in the Graph module by clicking the Visualize button on the upper left side of the Information Pane.

#### Information Information Pane can contain different badges to highlight important attributes. | Badge | Description | | ------------------------ | ---------------------------------------------------------------------------------------------------------------- | | **Tier 0** | Indicates that the object is a Tier 0 asset — an organization owner. | | **Privileged** | Indicates that the object is privileged. | | **Shadow Admin** | Indicates that the user can reach Tier 0 through an attack path without holding an explicit administrative role. | | **Inactive** | Indicates that the account has been inactive beyond the configured threshold. | | **Outside Collaborator** | Indicates that the user is an outside collaborator rather than an organization member. | Information Pane contains Details, Organizations, Teams and Roles tabs respectively. **Details** Details tab contains attributes below about the user object. | Attribute | Description | | -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Organization Role | The user's role within the organization (`admin` or `member`). | | Object ID | The GitHub node identifier of the user. | | Is Privileged | Whether the user is privileged. | | Shadow Admin | Whether the user can reach Tier 0 through an attack path without an explicit administrative role. | | Inactive | Whether the account has been inactive beyond the configured threshold. Determined from the Enterprise audit log; when no activity data is available the user is not reported as inactive. | | Outside Collaborator | Whether the user is an outside collaborator rather than an organization member. | | Two-Factor Auth | Whether the user has two-factor authentication enabled. Displayed as **Enabled**, **Disabled**, or **Unknown**. | | Profile URL | The URL of the user's GitHub profile. | > **Unknown** two-factor status means the scanning credential could not enumerate the organization's members without 2FA — that list is available only to organization owners. It does not mean the user lacks 2FA, and no finding is raised on an unknown value. **Organizations** Organizations tab contains a list of organizations the user is a member of.

**Organization:** The name of the organization object. **Login:** The unique account name (handle) of the organization. **Teams** Teams tab contains a list of teams the user belongs to.

**Team Name:** The name of the team object. **Permission:** The default permission the team is granted on its repositories. **Roles** Roles tab contains a list of organization roles assigned to the user.

**Role Name:** The name of the organization role. **Base Role:** The built-in repository role the role is derived from, if one is set. **Privileged:** Whether the role is privileged. #### Issues Issues pane contains identified issues on the user object.