View users and groups
Browse the read-only Users & Groups page — search, filter by source and status, and inspect user and group detail panels including memberships.
The Users & Groups page is your read-only roster of everyone Hook knows about in the selected organization, plus the groups they belong to. You use it to confirm a directory sync landed the right people, look up a single user's details and group memberships, or check who is in a group before you target it with a campaign or training. There is nothing to edit here — the page reflects what your directory or a legacy import sent Hook, and you change the source data to change what shows up.
Before you start
You'll need:
- Org admin role in Hook, with the right organization selected in the sidebar org switcher if you manage more than one. Switching orgs resets the page — search, filters, and any open detail panel clear.
- At least one source of users. Users and groups arrive from a directory sync (Microsoft Entra) or a legacy import. If you haven't connected a directory yet, see Sync users from Microsoft Entra — until the first sync completes, this page is empty.
What this page is (and is not)
This page is read-only by design. There is no Add user, Import, Invite, Create group, edit, or remove control anywhere on it. Every user and group originates from a directory sync or a legacy import, and the source of record stays in charge. To change a name, role, group membership, or to add or remove a person, you make the change in the source directory (for example, Microsoft Entra) and it appears here after the next sync.
Where editing happens
If you came here looking for a way to add a user or fix a group, you're in the wrong place — that work happens in your directory. See Manage directory connections to manage which directories feed Hook.
Read the stat cards
Three cards across the top of the page summarize the org you have selected:
- Total Users — the headline count, with
N active · N inactiveunderneath. - Directory-Synced — how many users came from a directory sync, with
N% of total usersunderneath so you can see your sync coverage at a glance. - Total Groups — the headline group count, with
N activeunderneath.
Below the cards sit two tabs, Users and Groups, that switch the table
beneath them. The active tab is reflected in the URL (?tab=groups), so you
can bookmark or share a link straight to the Groups view.

Browse the Users tab
Search and filter
A search box filters by name or email as you type (there's a small delay while it settles, and an X clears it). Two dropdowns narrow the list further:
- Source — All Sources, Microsoft Entra (directory-synced), or Imported (brought in from an external source, not actively synced).
- Status — All Status, Active, or Inactive.
A live count to the right of the filters tells you how many users match
(N users). When no users match your filters, Hook tells you so and suggests
adjusting the search, source, or status.
Read the columns
Each row shows the user across six columns:
- User — avatar initials, name, and email.
- Source — a colored badge: Microsoft Entra or Imported.
- Role —
adminortarget. - Status — Active (green) or Inactive (gray).
- Groups — the number of groups the user belongs to.
- Updated — when the record last changed, shown as a relative time
(
5m ago,3h ago,2d ago,2w ago) and as a date once it's older than a month.
Click any row to open the user detail panel.

Inspect a user
Clicking a row slides in a User Details panel from the right. It shows:
- The user's name and email in the header.
- Source, Role, Status, and Last Updated.
- Group Memberships — each group the user belongs to, with its member count and source badge. A group the user has left shows as Removed with the date instead of a member count.
If the user came from a directory sync, a blue callout reads To update this user, edit them in Microsoft Entra. Changes appear here after the next sync. A small helper line at the bottom restates how that source is managed.

Browse the Groups tab
Switch to the Groups tab to see the same idea applied to groups.
Search and filter
The search box filters groups by name. The Source dropdown here has more options than the Users tab, because groups can come from more places:
- Microsoft Entra — synced from your directory.
- Legacy — migrated from a legacy PhishingBox import, no longer actively synced.
- Manual — created directly in Hook, not connected to a directory.
- System — system-managed, maintained automatically and not editable.
The Status dropdown offers Active or Inactive, and a live count shows how many groups match.
Read the columns
Each group row shows: Group (icon and name), Source badge, Status, Members (count), and Created (date). Click a row to open the group detail panel.

Inspect a group
The Group Details panel shows the group name and member count, then Source, Status, and Created, followed by the full Members list — each member's name, email, and role. A member who has left appears as Removed with the date.
Source-specific callouts appear at the top of the panel:
- A directory-synced group shows To rename this group or change its members, edit it in Microsoft Entra. Changes appear here after the next sync.
- A system group shows System-managed group. Maintained automatically; not editable.

How status is decided
Status is derived, not stored — Hook calculates it each time the page loads rather than reading a saved flag:
- A user is Active only when the record is not soft-deleted and its
underlying status is
ACTIVE. Anything else — soft-deleted, or marked inactive in the source — reads as Inactive. - A group is Active when it isn't soft-deleted, and Inactive when it is.
Soft-deleted users and groups still appear on the page (so you keep a record of who used to be here), but their rows are dimmed and sort after the active ones. In a detail panel, a soft-deleted user's memberships are labeled Former Group Memberships and a soft-deleted group's roster is labeled Former Members.
Common pitfalls
- You can't edit anything from this page. There is no button to add, invite, import, edit, or remove a user or group. If you need a change, make it in the source directory and wait for the next sync — the detail panels for synced records tell you exactly where to go.
- Changes aren't instant. Edits you make in Microsoft Entra (a rename, a new hire, a removed member) appear here only after Hook's next sync, not the moment you save them in Entra.
- The page looks empty after connecting a directory. Users and groups show up only once the directory connection completes its first sync. If you just connected, give the initial sync time to run.
- An offboarded person still shows up. Soft-deleted users remain visible (dimmed, sorted last, marked Inactive) so historical campaign and training data stays attributable. That's expected, not a bug.
Related
Sync users from Microsoft Entra
Connect a directory, pick groups, preview members, and confirm so this page stays current.
Manage directory connections
See and manage which directories feed users and groups into Hook.
Navigate the org portal
Find your way around the org portal's nav, org switcher, and core pages.
Concepts
Understand the building blocks — orgs, users, groups, and how sources fit together.
Automate report delivery
Schedule email delivery of campaign, training, and executive reports so stakeholders get the numbers without you sharing manually.
Sync users from Microsoft Entra
Connect Hook to Microsoft Entra (Azure AD), pick groups to sync, preview members, and confirm — so your user list stays current.