Users (Admin)
The Users tab is the read-side of identity in InfraScout. Every Entra account discovered through the configured connector lands here, with the metadata you need to decide whether to grant access, scope a tool group, or pin a visibility list to that account.

Layout
The page header carries the section title (Role Management) and the Admin Access chip. The tab strip switches between Users, Groups, and Connectors.
A description line under the heading reminds you what is on display: "Browse synced Entra ID user directory." Two header buttons sit above the table: a Show deleted toggle and Refresh. The total user count (N users) is in the corner.
A free-text Search box matches name, email, or UPN.
Table
Each row carries:
- User — display name with avatar, plus the UPN underneath.
- Username — the UPN as a stable identifier.
- Status — Enabled (green chip), Disabled (red), Deleted (gray, only visible when Show deleted is on).
- Actions — context menu for that row (assign role, view sessions, view executions).
The list does not page-jump; it scrolls with the rest of the table. The total count and the visible filter set are always shown.
What the data is for
Three things across the rest of the portal hang off this list:
- Visibility lists. Every entity in InfraScout — agents, agent groups, sessions, insights, playbooks, MCP servers — carries a visibility list of users and groups. The pickers used to edit those lists pull from this directory.
- Audit attribution. Every audit row in Browser Sessions, MCP Sessions, Executions, and Chat Audit attributes its action to one of these users.
- Assignee fields. Insight assignees are picked from this directory.
Sync behavior
The directory is a snapshot of Entra. The Connectors tab shows when the last sync ran and how often the next one is scheduled. To force a sync after a fresh hire or termination, hit Sync on the connector card; the Status chip on the affected user flips on the next page reload.
Show deleted
InfraScout keeps soft-deleted users for the audit retention window even after Entra removes them. Toggling Show deleted reveals those rows so you can answer "who ran this command in 2023" even after the account was deprovisioned. The deleted rows are clearly chipped and never participate in active visibility lists.