Identity / Identities
Identities
Every person and agent the platform knows about, account or not, with a page per identity that gathers access, usage, security findings, cost, connections, devices, and activity, and per-person killswitches.
The Identities page lists every person and agent the platform knows about, whether or not they hold an account in the organization. It answers two questions: who is using AI tools across the organization, and what one particular person or agent has access to and has done. Each identity has its own page that pulls together what the rest of the platform records about that subject. Open it from Identity > Identities in the project sidebar.
Access requirements
Section titled “Access requirements”The roster requires the project:read scope, which every default role includes. Opening an identity requires org:read. Some panels need more: risk findings and shadow MCP servers need org:admin, reading another person’s chat sessions needs chat:read, and killswitches need org:admin. A panel the viewer cannot see names the missing permission. See Roles and Permissions for how scopes map to roles.
How identities are resolved
Section titled “How identities are resolved”The roster combines four sources:
- Organization members and their roles. With directory sync connected, department, job title, employment type, and directory groups come with them. See Directory sync and roles for how the directory provisions members and maps groups to roles.
- Usage reported by AI tools in the current project. This is how people the directory has never heard of show up.
- Agents registered on Agent identity.
- Managed devices from a connected device management integration.
Each identity resolves to one canonical identifier. A member is user:<id>, an email address with no member behind it is email:<address>, a tool-reported identifier with no address is external:<id>, and an agent is agent:<id>. Every identifier seen for a subject folds onto the same identity, so a link from a tool log, audit log, session, or risk finding lands on the same page.
The roster is not limited to a time window. Someone who has been inactive for months is still listed, and each identity page shows activity over its own selected time range.
Kinds of identity
Section titled “Kinds of identity”- Person covers every member, and every email address that could not be matched to a member. A person marked No linked account has activity the platform has seen but no single member account behind it. That usually means they are using AI tools without an account in the organization, or that several members share the address.
- Agent is a registered agent.
- Unknown is a tool-reported identifier with no email address. It is not evidence of an agent.
Find who is using AI tools
Section titled “Find who is using AI tools”The roster sorts by last activity by default and can be narrowed to people or agents, searched by name or email, and filtered. The filters that matter most for governance:
- Enrollment separates identities the directory knows and has seen working from those it has not.
- Uses personal account finds people working through personal AI subscriptions the organization does not govern. The Accounts column shows which Claude, Codex, or Cursor accounts each identity has used, labeled team or personal.
- Device agent shows coverage of the on-device agent on each person’s managed machines, when a device integration is connected.
- Last activity, Roles, Department, and Team narrow the list to a slice of the organization.
Filters appear only when at least one identity matches them. Sort order is kept in the URL, so a sorted roster can be shared as a link.
Governing personal accounts in Claude Cowork and Claude Code Desktop is not possible at this time.
To bring someone listed with No linked account under management, invite them from Team. Their activity links to their member account once they sign in.
Investigate one identity
Section titled “Investigate one identity”Select a row to open the identity page. A time range picker in the header scopes every panel, and each panel links to the page that owns its data, filtered to this identity.
- Overview starts with Needs attention, which lists risk findings, personal-account activity, shadow MCP servers reached, denied authorization checks, and devices missing the device agent.
- Access shows the person’s roles, the scopes those roles grant, the MCP servers and skills they can reach, recent authorization checks, and their killswitches.
- Usage shows tool calls, chat requests, and tokens, and can separate usage through company AI accounts from usage through personal ones. Cost shows spend, token breakdown, and model mix.
- Security lists risk findings, shadow MCP servers reached, and device agent detections for this person.
- Connections traces activity from devices through MCP clients and servers to tools, and lists the live MCP sessions the identity holds.
- Accounts & devices shows the enrollment checklist, linked AI accounts, and managed devices with their agent coverage.
- Activity lists the identity’s audit log entries and agent sessions.
An agent’s page shows its lifecycle status, owner, configured permissions, recent changes, authorization checks, and current sessions. Usage, cost, and risk figures are not recorded for agents. Select Edit Agent Identity to manage the agent.
Killswitches
Section titled “Killswitches”A killswitch turns off MCP tool calls for one person across all or chosen MCP servers, for a set period, without ending their sessions. Killswitches are managed in the Killswitches panel on the person’s Access tab. See Killswitches for when to use one, what the person experiences, and how to lift it.