Search and view all the alerts triggered and generated for the user

Viewing Additional Details for Investigation 6-33

6.11.9.11 Add user to user group

You could add users to groups and create groups, using the Add User to Group button from search and details pages. If you are viewing the details of a specific user, and based on the analysis, you identified this user as a fraudster, you could add this user to a blacklisted group from the dialog. You do not have to navigate away to the details page to add the user. To add a user to a user group:

1. Click the User ID or User Name link from the Sessions page for a valid user.

The User Details page is displayed.

2. Click Add User To Group at the upper right corner.

The Add User to Group dialog is displayed.

3. Search for the group you want to add the user to by the group name.

Only those groups that the user is not a member of are displayed.

4. Select the group to add the user to and click the Add button.

6.11.9.12 Create a new user group and add user to the newly created group

The Add User to Group and Add to Group dialogs allow you to search and view the details of a user group, before adding the user to that group. If you do not find the group to which this user belongs, a new group can be created. If you perform a fraud analysis, and you identify that this particular user belongs to a certain group, but you do not have that group available, you can create that group. Then, you can add that particular user to that group. To create a new user group and add user to the newly created group: 1. Click the User ID or User Name link from the Sessions page for a valid user. The User Details page is displayed.

2. Click the Add User to Group button at the upper right corner.

The Add to User dialog is displayed. 3. Click Create New Group button and specify the details for the new group. 4. Select the Open this Groups details tab when done option. 5. Click the Add button. The groups details tab is displayed with the user added.

6.11.9.13 Remove user from user group

You can remove a user from the group from detail pages. For example, if you added a user to a monitor user group, and you have been monitoring the user for three months, and you realize that he or she is a valid user, you can remove that user from that group. To remove a user from the user groups: 1. Click the User ID or User Name link from Sessions page for a valid user. The User Details page is displayed. 2. View the Groups tab. The Groups tab shows a listing of the groups. 6-34 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager

3. Remove the user from a group by selecting a specific row and clicking the Remove

from group button. You can select multiple rows to remove multiple users.

4. Click Remove from Group.

The user is removed from the group selected. 6.11.9.14 Navigate to other details pages for groups, alerts, devices, locations, sessions, policy, rules and fingerprints You can click a link from a tab to open the corresponding details pages. ■ From the Users tab: click the User Name link to open the User Details page. ■ From the Groups tab: click the Group Name link to open the Group Details page. ■ From the Locations tab, click the Location or IP link to open the Location Details page. ■ From the Alerts tab, click the Alert Message link to open the Alert Details page. ■ From the Devices tab: click the Device ID link to open the Device Details page. ■ From the Fingerprint tab: click the Fingerprint ID to open the corresponding fingerprint details page. Links for User Name, IP address, session, and location are available on the Sessions tab.

6.12 IP or Locations Country, State, or City Details Page

IP, Country, State, or City Details pages provide details for an IP Address, country, state, or city, including mapping of city, state, country, cross reference on other data types such as device, user, alerts, sessions, browser, OS, locales, fingerprints, and so on. You can drill down to the respective Location Details page by selecting either the IP Address, Country Name, State Name, or City Name shown in the Sessions search result or Cases sessions tab. The Location Details page is divided into the following tabs: Note: You should not be able to remove a user from the Organization ID of the primary user group. Table 6–22 Location Details Tabs Location Details Tabs Description Summary The Summary tab provides general location information. Groups The Groups tab lists groups which the location is associated to. Users The Users tab lists successful and unsuccessful login attempts by all users from the location. Devices The Devices tab lists successful and unsuccessful login attempts by all devices from the location.