Dashboard Reports

Customizing Veza Access Risk tiles

The Veza dashboard includes a Dashboard Reports summary for quick insight into potential vulnerabilities. By default, these show users and service accounts with privileged access, such as Guest users with Admin privileges, Service Accounts with Delete permissions, or Identities that can circumvent Multi-Factor Authentication.

By adding and removing reports from the Dashboard reports category, administrators can customize the Veza-built or user-created reports summarized on the main landing page.

Dashboard tiles on the primary Veza landing page

Dashboard Reports show the increase or decrease over time, customizable by setting the Time Range. The percent change and trend update based on the chosen period, shown along with the current total results for each section.

For 6 months and 1-year views, charts represent weekly values instead of daily values. The value shown is for the last day of a week. For example, the week of 11/19-11/25 appears on the X-axis as 11/19, and the value is the query result on 11/25.

To learn about how Veza detects these findings, and view and take action on results, click a section name or click Open in Reports from the actions menu.

Dashboard reports

Each Access Risk tile has tabs to filter results by report section. For example, the Service Accounts with Update or Delete Permissions report includes several queries in the Active Directory section. The Active Directory dashboard section shows the combined value.

Edit Queries in a dashboard report section with Actions > Open in Query Builder.

You can see that Veza identifies these users by their relationship to the Enterprise Admins or Domain Admins AD groups, by viewing the query details.

You can click any tile to open the original report for additional details or to investigate results in Authorization Graph or Query Builder.

To get alert notifications when changes to query results pass a configured threshold, create a Rule for the query.

Customizing dashboard reports

Veza administrators will want to customize reports in the Dashboard Reports category to best fit their needs and control what information users see when they log in. Adding a report to this category adds a section to the main dashboard. Removing an individual query removes it from the dashboard summary. Removing a report will remove the entire section.

Editing a query can filter out:

• Individual "false positives" by entity name or id.

• Subsets of resources or identities based on environment tag or domain attribute.

• Inactive users within a grace period (such as the last 30 days).

Administrators can also change the titles of built-in queries, and add additional context to the query description.

To change a query (such as editing the title, description, or filters):

1. Click on a tile to open the section in Reports.

2. Find the query you want to edit and click the report name or Open In Query Builder.

3. Edit the query: change the name, or adjust filters on attributes or permissions.

4. For example, to exclude an individual entity, add an attribute filter on entity name.

5. Save the query.

To remove a query, preventing it from appearing in the Dashboard Reports summary:

1. Click on a tile to open the section in Reports.

2. Click Edit Report to switch to edit mode.

3. Click the delete icon next to any query to remove

4. When finished, click Save Report.

You can add queries, customize sections, and update the report title and description from the Edit Report screen.