User activity
Monitor individual and department-level AI tool usage.
Overview
The User activity page shows which people and departments used AI tools. It has two tabs, Users and Departments. Each tab label shows how many rows it holds.
Users tab
The default view lists users with AI tool activity in the last 30 days, 20 per page, ordered by total prompts. The table includes:
- User: The user's email address. Click the row to open the detail view.
- Department: A department sent with the user's events by your log source, or "Unknown" if none was sent. If the user's events carry more than one department, the list shows the alphabetically last one, while the detail view shows the most recent
- Total prompts: POST requests the user sent to AI tools
- Risk score: The highest risk score among the AI tools the user accessed. A tool that has not been scored yet counts as 0.
Click a column header to sort the users on the current page. Your sort choice is remembered the next time you open the page.
User detail view
Clicking a user row opens a detail view for the period chosen in the period selector. It shows:
- Email address
- Department, taken from the user's most recent AI tool event
- Total prompts in the selected period
- A tools used table with the event count, prompt count and last used date for each tool
Use the back arrow to return to the users list.
Departments tab
The Departments tab groups the last 30 days of AI tool activity by department, 10 per page. Users whose events carry no department are grouped under "Unknown". The table includes:
- Department: Name of the department as sent by your log source
- Users: Number of distinct users in this department who accessed AI tools
- Total prompts: POST requests sent to AI tools by everyone in the department
- Top tool: The AI tool with the most events from this department
- Risk score: The highest risk score among the AI tools the department accessed
Click a column header to sort the departments. Department rows do not open a detail view.
Time period
The period selector offers last 7 days, last 30 days and last 90 days. It sets the window for the user detail view. The Users and Departments tables, and the counts on their tabs, always cover the last 30 days.