#Update Users Information and Settings

To update information and settings for one user, complete the following steps:

1. Click the display name of the user to enter the User details page. On the User details page, you can update the fields in the following tabs:

   • Basics

   • Profile

   • Permissions

   • Licenses and apps

   • Settings

     NOTE

     A Microsoft Entra ID P2 or Microsoft Entra ID Governance license is required in the corresponding tenant for eligible role updates.

   • Governance details

     NOTE

     You must have Cloud Governance subscription and have imported the user to Cloud Governance.

2. Click Edit or the Edit button in each tab to edit the corresponding information or settings.

3. Click Save to update the information or settings.

#View and Manage User Permissions

On the User details page, the permissions that a user has to Teams, Groups, SharePoint Online sites, and OneDrive are listed in the Permissions tab.

To view the detailed list of objects that the user is having permission to and the permission details, click View details on the upper-right of each section.

In the Group permissions details panel, you can also assign or remove membership and ownership of your manageable Groups to the user in the Manageable permissions tab. Your manageable scope is defined by your permissions in EnPower. For more information or assistance on the scope, contact your administrator or refer to Permissions if you are a service administrator or application administrator.

#Manage MFA Settings

You can enable or disable the multi-factor authentication for users in EnPower, to manage the MFA settings for users, complete the following steps:

1. Select the users to manage MFA settings for.

2. Click the MFA settings.

3. In the MFA settings panel, click Enable, Enforce, or Disable to update the MFA settings for the selected users.

For more information on MFA settings, refer to the deployment guide of Microsoft.

#Reset MFA Settings

You can reset MFA settings for your users when they are unable to authenticate through their configured methods or when their current authentication methods and status are not secured. This will restore their authentication status, reset their authentication methods, and delete the app passwords generated by the selected users.

To reset MFA settings for users, complete the following steps:

1. Select the users to reset MFA settings for.

2. Click Reset MFA settings.

3. In the confirmation window, click Reset to reset the MFA settings.

#Revoke Sessions

You can revoke user sessions out of security concerns in EnPower. This will revoke all sessions for the user, requiring the user to re-sign in on all devices.

To revoke sessions for users, complete the following steps:

1. Select the users to reset revoke sessions.

2. Click Revoke sessions.

3. In the confirmation window, click Yes to revoke user sessions.

#Block sign-in

You can block a user from signing in if suspicious behaviors have been detected or some users temporarily do not need to sign in to any services. When you block someone, it immediately stops any new sign-ins for that account, and if they’re signed in, they will be automatically signed out from all Microsoft services within 60 minutes. This will not stop the account from receiving mail and does not delete any data.

To block the user from signing in, complete the following steps:

1. Select the users to block from signing in.

2. Click Block sign-in.

3. In the Block sign-in panel, toggle the Block sign-in to On or Off to update the block sign-in setting for the selected users.

4. Click Save to update the block sign in setting. Click Cancel to cancel without saving any changes.

#Reset Password

To reset a user’s password, complete the following steps:

1. Select the user whose password to reset.

2. Click Reset password.

3. In the Reset password panel, update the password settings, including:

   • Manually configure a password – Manually enter a new password for this user.

   • Automatically create a password – Generate a new password automatically for this user.

   • Require this user to change their password when they first sign in – By selecting this option, the user whose password has been reset will be required to change the password when signing in.

4. Click Apply to reset the password.

#Clone User Properties

You can create or invite a user by cloning user properties for an existing user to avoid repetitive user properties’ configurations, including tenant selection, user profile configuration, license usage location selection, and membership configurations.

To create or invite a user by cloning user properties, complete the following steps:

1. Select the user to clone user properties from.

2. Click Clone user properties.

3. In the Create user panel, complete the user creation configurations. For details on creating a user, see Create or Invite Users.

#Move Organizational Unit (OU)

For on-premises users, you can move them from their original organizational unit to another one.

1. Select one or more on-premises users in the same tenant domain.

2. Click Move OU on the ribbon.

3. In the Move OU panel, select the organizational unit to move the groups to.

4. Click Save.

#View User Activities

You can view the last activity date of a user on each application on the User details page. Click the display name of a user to go to the User details page. In the Activities tab, you can view:

• Last Exchange activity date

• Last OneDrive for Business activity date

• Last SharePoint activity date

• Last Viva Engage activity date

• Last Microsoft Teams activity date

The data is the latest dates on which a form of activity was performed by the user.