Hook SecurityHook Docs
Org Admin

View users and groups

Browse the read-only Users & Groups page — search, filter by source and status, and inspect user and group detail panels including memberships.

The Users & Groups page is your read-only roster of everyone Hook knows about in the selected organization, plus the groups they belong to. You use it to confirm a directory sync landed the right people, look up a single user's details and group memberships, or check who is in a group before you target it with a campaign or training. There is nothing to edit here — the page reflects what your directory or a legacy import sent Hook, and you change the source data to change what shows up.

Before you start

You'll need:

  • Org admin role in Hook, with the right organization selected in the sidebar org switcher if you manage more than one. Switching orgs resets the page — search, filters, and any open detail panel clear.
  • At least one source of users. Users and groups arrive from a directory sync (Microsoft Entra) or a legacy import. If you haven't connected a directory yet, see Sync users from Microsoft Entra — until the first sync completes, this page is empty.

What this page is (and is not)

This page is read-only by design. There is no Add user, Import, Invite, Create group, edit, or remove control anywhere on it. Every user and group originates from a directory sync or a legacy import, and the source of record stays in charge. To change a name, role, group membership, or to add or remove a person, you make the change in the source directory (for example, Microsoft Entra) and it appears here after the next sync.

Where editing happens

If you came here looking for a way to add a user or fix a group, you're in the wrong place — that work happens in your directory. See Manage directory connections to manage which directories feed Hook.

Read the stat cards

Three cards across the top of the page summarize the org you have selected:

  • Total Users — the headline count, with N active · N inactive underneath.
  • Directory-Synced — how many users came from a directory sync, with N% of total users underneath so you can see your sync coverage at a glance.
  • Total Groups — the headline group count, with N active underneath.

Below the cards sit two tabs, Users and Groups, that switch the table beneath them. The active tab is reflected in the URL (?tab=groups), so you can bookmark or share a link straight to the Groups view.

Users and Groups page showing roster stat cards above the Users and Groups tabs

Browse the Users tab

Search and filter

A search box filters by name or email as you type (there's a small delay while it settles, and an X clears it). Two dropdowns narrow the list further:

  • SourceAll Sources, Microsoft Entra (directory-synced), or Imported (brought in from an external source, not actively synced).
  • StatusAll Status, Active, or Inactive.

A live count to the right of the filters tells you how many users match (N users). When no users match your filters, Hook tells you so and suggests adjusting the search, source, or status.

Read the columns

Each row shows the user across six columns:

  • User — avatar initials, name, and email.
  • Source — a colored badge: Microsoft Entra or Imported.
  • Roleadmin or target.
  • StatusActive (green) or Inactive (gray).
  • Groups — the number of groups the user belongs to.
  • Updated — when the record last changed, shown as a relative time (5m ago, 3h ago, 2d ago, 2w ago) and as a date once it's older than a month.

Click any row to open the user detail panel.

Users tab with the Source filter open above the roster table

Inspect a user

Clicking a row slides in a User Details panel from the right. It shows:

  • The user's name and email in the header.
  • Source, Role, Status, and Last Updated.
  • Group Memberships — each group the user belongs to, with its member count and source badge. A group the user has left shows as Removed with the date instead of a member count.

If the user came from a directory sync, a blue callout reads To update this user, edit them in Microsoft Entra. Changes appear here after the next sync. A small helper line at the bottom restates how that source is managed.

User Details panel for a Microsoft Entra synced user with group memberships

Browse the Groups tab

Switch to the Groups tab to see the same idea applied to groups.

Search and filter

The search box filters groups by name. The Source dropdown here has more options than the Users tab, because groups can come from more places:

  • Microsoft Entra — synced from your directory.
  • Legacy — migrated from a legacy PhishingBox import, no longer actively synced.
  • Manual — created directly in Hook, not connected to a directory.
  • System — system-managed, maintained automatically and not editable.

The Status dropdown offers Active or Inactive, and a live count shows how many groups match.

Read the columns

Each group row shows: Group (icon and name), Source badge, Status, Members (count), and Created (date). Click a row to open the group detail panel.

Groups tab showing mixed source badges, statuses, member counts, and created dates

Inspect a group

The Group Details panel shows the group name and member count, then Source, Status, and Created, followed by the full Members list — each member's name, email, and role. A member who has left appears as Removed with the date.

Source-specific callouts appear at the top of the panel:

  • A directory-synced group shows To rename this group or change its members, edit it in Microsoft Entra. Changes appear here after the next sync.
  • A system group shows System-managed group. Maintained automatically; not editable.

Group Details panel for a Microsoft Entra synced group with members

How status is decided

Status is derived, not stored — Hook calculates it each time the page loads rather than reading a saved flag:

  • A user is Active only when the record is not soft-deleted and its underlying status is ACTIVE. Anything else — soft-deleted, or marked inactive in the source — reads as Inactive.
  • A group is Active when it isn't soft-deleted, and Inactive when it is.

Soft-deleted users and groups still appear on the page (so you keep a record of who used to be here), but their rows are dimmed and sort after the active ones. In a detail panel, a soft-deleted user's memberships are labeled Former Group Memberships and a soft-deleted group's roster is labeled Former Members.

Common pitfalls

  • You can't edit anything from this page. There is no button to add, invite, import, edit, or remove a user or group. If you need a change, make it in the source directory and wait for the next sync — the detail panels for synced records tell you exactly where to go.
  • Changes aren't instant. Edits you make in Microsoft Entra (a rename, a new hire, a removed member) appear here only after Hook's next sync, not the moment you save them in Entra.
  • The page looks empty after connecting a directory. Users and groups show up only once the directory connection completes its first sync. If you just connected, give the initial sync time to run.
  • An offboarded person still shows up. Soft-deleted users remain visible (dimmed, sorted last, marked Inactive) so historical campaign and training data stays attributable. That's expected, not a bug.

On this page