Overview
Torii discovers users across your organization’s applications and systems. To help you monitor and manage these users and their access, Torii supports user categorization.
A discovered user can be classified as:
- Employee
- Non-Human User
- External User
This article explains the different user categories in Torii, how they are defined, and how they affect what you see across Torii.
Why categorize users?
User categorization helps keep your user inventory organized and easier to manage.
By classifying users into meaningful groups, you can:
- Reduce noise when reviewing users and usage across applications
- Improve visibility into who represents employees, external collaborators, and non-human identities
- Manage users more efficiently by focusing on the right user type for the task at hand
- Create highly focused automations that include/exclude specific user types
User Categories
Employees
Employees in Torii are users that represent your actual company employees, and not other independent people that may have access to your systems but are not directly related to the company, such as vendors, contractors etc.
Users are classified as employees based on the employee definition configured in Settings.
You can read more about Employees, how to set up the definition for them in Torii, and how they are represented in Torii here.
Note: The Employee tab will always be shown, even if employees are not configured. If they are not yet configured, the page will prompt you to define your employees with a link to the Settings page.
External Users
External users in Torii are users that represent people not directly related to the company, such as vendors, contractors etc.
External users are users whose email domain doesn't match your account's domains.
- This classification allows you to easily monitor non-company users who have access to your systems. Torii also clearly states the domain for each external user, which apps they have access to, etc. to make sure that no unauthorized access has been given.
- When managing your users, you can more clearly create different flows for your company’s users vs. external users.
To make sure Torii is categorizing these users correctly, company domains can be added to your account by contacting the support team.
The External users tab in the Users page only lists active external users which return from at least one app. If an external user has been offboarded from all your systems, they will no longer show in this tab (but you can search for them using the global search functionality).
Note: Depending on your employee and/or non-human user configuration, users can be both an external user, and an employee / non-human user. They can never be both an employee and a non-human user.
Non-Human Users
Non-Human Users in Torii are users that represent non-human identities, such as service accounts, bots, integrations, AI agents, and automations.
Users are classified as Non-Human Users based on the Non-Human User definition configured in Settings.
You can read more about Non-Human Users, how to set up the definition for them in Torii, and how they are represented in Torii here.
Note: The Non-Human Users setting is pre-populated by Torii, but you can always customize the definition to fit your organization. The Non-Human Users tab will always be shown, even if you delete the Non-Human Users configuration. If there is no configuration, the page will prompt you to define Non-Human Users with a link to the Settings page.
Users (no categorization)
Ideally, all users discovered will fall into the above three categories, but this is not always the case. Some users may not fall into any category, such as employee aliases that are not updated in the IDP or if the Merge Users feature is not enabled.
In the Users tab, you will find Employees, Non-Human Users, and these uncategorized users. You can view them specifically by filtering by User Type is not set in this tab.
This tab is useful for reviewing your (non-external) full user inventory while keeping other user types separated into their dedicated tabs.
Where user categories appear in Torii
User categories are represented in Torii in the following areas:
- Users page
- User – a single-user page
Users page
Torii’s Users page consists of these four tabs:
Employees | Non-Human Users | Users | External Users
Current–Past user filter
In each tab (except the External Users tab) , you can filter the users by Current or Past status based on the life cycle (SOT) status you defined under Settings.
Note that the All option will show both Current and Past users, also including users with no used apps.
Single user page
On a single user page, you will see a tag indicating the user category (Employee, External User, or Non-Human User) when applicable. A user can have both the External and the Employee/Non-human tags.