USERS & GROUPS
The Users area is where you can manage all of your users and groups within your console. Click below to learn about the various administrative controls you have beneath the Users tab.
--Downloading a Sample CSV
--Active Directory Integration (opens in a new window)
DELETING & EDITING USERS
--Deleting/Mass Deleting Users
--Adding Users to Groups
ASSIGNING & REVOKING ADMIN
--Using Groups in Phishing
--Using Groups in Training
Click on Users and then the Import Users tab to be taken to the area where you can import users. We have three methods for importing users, 1) Quick import, 2) CSV import, and 3) Active Directory Integration.
If you have the "Allow Signup" feature enabled on your account, and users sign-up for accounts at training.knowbe4.com/login, those users will be automatically added to your user list. This setting is "off" by default on accounts created after September 2016.
Only import valid single-user email addresses. Do not import distribution lists or generic "catch all" email addresses.
In most cases, the only domain that will be active on your account is the initial domain your company signed up with. If your organization uses multiple domains in your email system (for example, firstname.lastname@example.org, email@example.com or firstname.lastname@example.org) we can add these additional domains as needed. Please contact support if you need us to allow additional domains.
Adding users – Quick Import
The first method to add users is using “Quick Import”. This will only allow you to import your users' email addresses. If you'd like to import additional information about your users, we recommend using CSV Import or Active Directory Integration (ADI).
Quick Import Screen
1) Click Quick Import beneath Users-->Import Users to view the Quick Import screen.
2) Email Format: Your input must be one email address per line with no commas or spaces, and the emails must only contain your company domain(s).
3) Text Box: You can type or paste a list of user email addresses here.
4) Password: You are given the option to set a password for your users, though this is not recommended except in special cases. If you don’t set a password for your users, they will be able to create their own password when they first login for training.
5) Groups: If you’ve already set up Groups, you can choose to add the users into a group.
6) Import Users: Click this button to import the user email addresses you've placed in the text box.
Adding Users – CSV Import
You can use our CSV import feature to bulk import users and add optional additional information about your users. This feature is located in the Users section under the Import Users tab.
CSV Import Screen
1) Click CSV Import beneath Users-->Import Users to import your users.
2) Upload a CSV file by clicking the Browse button.
3) The CSV Import allows you to import users in bulk with any of the following fields:
- Email (required)
- First Name
- Last Name
- Phone Number
- Manager Name
- Manager Email
- Employee Number
- Job Title
- AD Managed
Notes on importing users with CSV:
- The only required field is the Email field. Other fields should only be included if they are being used during import.
- Any headers (First Name, Last Name, etc.) must match exactly as shown above.
- You can upload users with different domains in their email address only if those domains have been added to your account as “allowed domains”. Generic or personal emails (E.g. Gmail, Yahoo, etc.) will fail.
- If you include the Group header in your CSV file, those groups you list will be automatically created in the system for you if they are not present already.
- You can add employees to multiple groups within one CSV import. If adding an employee to multiple groups, copy the entry for that employee and change the content of the Group field to add them to a different group. This would need to be done for each group you wish to add them to. E.g. if an employee is to be added to 5 groups, they would have 5 lines in the CSV; each with a different group (all other information would remain the same).
4) We've included three Examples of how you can format your CSV depending on your needs. Click any of the three examples to pop up a new window showing the example's formatting, as well as download a preformatted sample CSV.
5) Click the Import Users button to import your CSV. Note that you can import over existing users in the future and it will add any new data or alter any data you have changed, or add them to any new groups you’ve specified. Re-importing your users in the future will not duplicate them or delete their training or phishing history.
Download a Sample CSV:
You can download one of three sample CSVs from within your console. See #4 and #6.
Deleting & Editing Users
The All Users list under Users allows you to manage your users. You can add them to or remove them from groups, promote or revoke admin rights, edit basic profile information, and download a list of your users to a .csv file.
You can click on any user’s email address to see detailed information about that user’s training history and phishing results. You will also see a timeline showing that user's interaction with tests and training in the console, recording everything from the date and time they were added to the console, to when they last logged in.
You can also manually edit any information you have imported into the system about that user here. Keep in mind, if you're syncing user information with Active Directory (AD), AD will overwrite the information on the next sync if it is different.
If a user’s email address changes, change it in their profile in order to maintain that user’s training and phishing history. If you instead import the new email address to the system, it will create a new account for that user and it won’t carry over their previous history. If you accidentally import the newer email into the system, you can use our merge users feature to merge the two accounts.
Deleting/Mass Deleting Users:
To archive a user, simply check the box next to one or more users, click the Delete button, and choose “Delete Selected”. You can also mass archive users from the console by clicking the Delete button and choosing “Bulk delete from CSV”. This will prompt you to upload a simple CSV with a header of “Email” and then one email address per line. No other fields should be used in bulk deleting users from a CSV.
The above two methods will only archive users (their training/phishing history will be retained in our system) but will remove them from your active user list.
To delete users permanently, you will first need to delete (archive) the user(s) using one of the above methods, then search for "only deleted users" (from the Users tab, click the "Only deleted users" checkbox, then click Search). Once you see the user(s) you'd like to permanently delete, click the drop-down to the right of that user, and click Delete Permanently. Remember, all phishing and training history will also be permanently deleted once you take this action.
Archiving users will not remove training or phishing history, so if you re-add archived users at a later date, this information will be available again. Permanently deleting users will permanently delete this information, however.
Adding Users to Groups:
To add one or more users to a group, you can simply check the box next to each user you wish to add, then select the group in the upper right-hand drop-down box and click the “Add selected to group” button.
Assigning/Revoking Admin Privileges:
To assign a user administrator privileges, simply click the drop-down arrow on the right side of that user and select “Make Admin”. The same action can be used to revoke admin privileges. Administrators will show up with a blue background in the user list. All administrators will have access to the same features within the console.
If you assign administrator privileges to a user, it is helpful to change their time zone to the proper time zone for your organization. This will ensure that reporting features within the console (such as the time when a user clicks on a phishing link) will be shown in your time zone. You can do this by clicking the dropdown to the right of that user and clicking on “Edit”.
The best way to get the most out of your management console is to utilize Groups effectively. Groups can be used within your console to target users with specific phishing or training campaigns. Many organizations will begin with dividing users into groups by department, location (if you have multiple office locations), or even domains (if there are multiple domains on your account). Users can be in as many groups as they need to be in, and you can have an unlimited number of groups set up.
Click on Users, and then Groups, and you will see a list of any groups you have within the console. There are no groups by default. Click the "+New Group" button and you can create groups with names from 4-40 characters including spaces. You can also create groups automatically using the CSV import option under Import Users.
Once a group is created under the Groups tab, click on the name of the group to see who is a member of the group. This screen also allows you to remove users from the group by checking the box next to the user(s) and selecting the “Delete” button where you will be given the option to remove them from the group. You can also delete the user(s) from the console entirely as well as delete all users in this group from the system. You can download a CSV of all users in the group as well as add users to a different group from this screen. Note: Users can be in more than one group at a time.
Example of removing or deleting users from a group
You can delete groups that you no longer need. Deleting groups will not delete any users within the groups. Groups can be restored by searching for "only deleted groups" while under the Users-->Groups tab.
Using Groups in Phishing Tests:
Using groups in Phishing tests allows you to single out a subset of users with a specific phishing template. This can be helpful if you want to target your phishing attempts to certain departments, or create spear-phishing attempts on certain key staff. You can target multiple groups on a single phishing campaign. You can also use groups to conduct phishing tests by region or location if you want to get more specific metrics from the tests.
It is recommended that you create groups for different locations, repeat clickers, management or other high-risk sets of users.
Under the Reports tab within Phishing, you will be able to see how Groups are doing in terms of their phish-prone percentage and number of phishing “failures” (i.e. clicks).
Prior to sending out any phishing tests to your users, we recommend creating a test group for yourself and any other administrators you have on your account. You can utilize this test group after following our whitelisting recommendations to ensure that our emails will successfully reach your users.
Using Groups in Training:
Using groups allows you to assign specific training to a limited subset of users. When you set up a training campaign, you can select one or more groups from the dropdown. You can even set up an automated remedial training for a “clickers” group. Click here to learn how.
You can use groups to track training progress and run reports on various subsets of users. For example, you could find out how many members of the Accounting group had started, but not completed a specific course. Any course report can also be filtered by group.