#Update Users Information and Settings

To update information and settings for one user, complete the following steps:

1. Click the display name of the user to enter the User details page. On the User details page, you can update the fields in the following tabs:

   • Basics - Displays the basic information of the user account.

   • Profile - Displays the personal profile related information of the user.

   • Permissions - Displays the Teams, Groups, SharePoint Online Sites, and OneDrive permissions the user has. For more details, refer to View and Manage User Permissions.

   • Licenses and apps - Displays the licenses assigned to the user and the apps enabled for the user.

   • Settings - Displays the roles, administrative units, mailbox, and MFA settings of the user.

     NOTE

     A Microsoft Entra ID P2 or Microsoft Entra ID Governance license is required in the corresponding tenant for eligible role updates.

   • Activities - Displays the last activity dates of the user in each service. For more details, refer to View User Activities.

   • Governance details - Displays the lifecycle information of the user.

     NOTE

     You must have Cloud Governance subscription and have imported the user to Cloud Governance.

2. Click Edit or the Edit button in each tab to edit the corresponding information or settings.

3. Click Save to update the information or settings.

#View and Manage User Permissions

On the User details page, the permissions that a user has to Teams, Groups, SharePoint Online sites, and OneDrive are listed in the Permissions tab.

To view the detailed list of objects that the user is having permission to and the permission details, click View details on the upper-right of each section.

In the Group permissions details panel, you can also assign or remove membership and ownership of your manageable Groups to the user in the Manageable permissions tab. Your manageable scope is defined by your permissions in EnPower. For more information or assistance on the scope, contact your administrator or refer to Permissions if you are a service administrator or application administrator.

#View User Activities

You can view the last activity date of a user on each application on the User details page. Click the display name of a user to go to the User details page. In the Activities tab, you can view:

• Last Exchange activity date

• Last OneDrive for Business activity date

• Last SharePoint activity date

• Last Viva Engage activity date

• Last Microsoft Teams activity date

The data is the latest dates on which a form of activity was performed by the user.

#Manage MFA Settings

You can enable or disable the multi-factor authentication for users in EnPower, to manage the MFA settings for users, complete the following steps:

1. Select the users to manage MFA settings for.

2. Click Management > MFA settings.

3. In the MFA settings panel, click Enable, Enforce, or Disable to update the MFA settings for the selected users.

For more information on MFA settings, refer to the deployment guide of Microsoft.

#Reset MFA Settings

You can reset MFA settings for your users when they are unable to authenticate through their configured methods or when their current authentication methods and status are not secured. This will restore their authentication status, reset their authentication methods, and delete the app passwords generated by the selected users.

To reset MFA settings for users, complete the following steps:

1. Select the users to reset MFA settings for.

2. Click Management > Reset MFA settings.

3. In the confirmation window, click Reset to reset the MFA settings.

#Revoke Sessions

You can revoke user sessions out of security concerns in EnPower. This will revoke all sessions for the user, requiring the user to re-sign in on all devices.

To revoke sessions for users, complete the following steps:

1. Select the users to reset revoke sessions.

2. Click Management > Revoke sessions.

3. In the confirmation window, click Yes to revoke user sessions.

#Block sign-in

You can block a user from signing in if suspicious behavior is detected or if the user temporarily does not need access to any services. When you block a user, any new sign-ins to the account are immediately prevented. If the user is already signed in, they are automatically signed out of all Microsoft services within 60 minutes. Blocking sign-in does not stop the account from receiving email or delete any data.

To block the user from signing in, complete the following steps:

1. Select the users to block from signing in.

2. Click Management > Block sign-in.

3. In the Block sign-in panel, toggle the Block sign-in to On or Off to update the block sign-in setting for the selected users.

4. Click Save to update the block sign in setting. Click Cancel to cancel without saving any changes.

#Reset Password

To reset a user's password, complete the following steps:

1. Select the user whose password to reset.

2. Click Management > Reset password.

3. In the Reset password panel, update the password settings, including:

   • Manually configure a password – Manually enter a new password for this user.

   • Automatically create a password – Generate a new password automatically for this user.

   • Require this user to change their password when they first sign in – By selecting this option, the user whose password has been reset will be required to change the password when signing in.

4. Click Apply to reset the password.

#Clone User Properties

You can create or invite a user by cloning the properties of an existing user to avoid repeated configuration, including tenant selection, user profile settings, license usage location, and membership settings.

To create or invite a user by cloning user properties, complete the following steps:

1. Select the user to clone user properties from.

2. Click Management > Clone user properties.

3. In the Create user panel, complete the user creation configurations. For details on creating a user, see Create or Invite Users.

#Move Organizational Unit (OU)

For on-premises users, you can move them from their original organizational unit to another one.

1. Select one or more on-premises users in the same tenant domain.

2. Click Management > Move OU on the ribbon.

3. In the Move OU panel, select the organizational unit to move the groups to.

4. Click Save.