Managing Risk Center
The Risk Center gives users a single filterable view of risks discovered across your environment. These risks are displayed along with their metadata, including severity, risk name, and identity type. You can act on these risks within the risk center, changing the status or notifying interested parties.
Important
Vault-object risks are not synced and will not surface in the Risk Center.
Viewing the Risk Center
You can view the discovered risks in the Risk Center.
To view discovered risks:
-
Go to Agentic Fabric.
-
From the navigation menu, select Risk Center.
Select the tabs at the top of the page or the quick filters on the Risk Center page to refine the exposed credentials listed in the table.
Additional filtering can be applied by selecting + Advanced. Select Clear to clear all configured filters.
To perform bulk actions:
-
Select the checkbox for each row or the top checkbox to select all rows.
-
Select the Bulk Action icon
and choose Change status or Change severity to apply the change to the selected risks.
You can use the Export icon to export the results or selected risks to a CSV file.
From the risk center, you can review the following information about each discovered risk:
- Severity: The risk severity of the risk.
- Risk Name: A description of the discovered risk.
- Secret Type: The type of secret involved in the risk.
Viewing Risk Details
You can access a risk’s details page to view additional data about the risk, including its attributes, activity, and the mitigation steps.
To access a risk’s details page:
-
Go to Agentic Fabric.
-
From the navigation menu, select Risk Center.
-
Find and select the Risk Name to view its Details page.
From this page, you can perform the following actions:
-
In the Overview tab:
- View and copy
the risk’s attributes. - View a description of the risk.
- Review the lineage map, which demonstrates the relationship between agents and various resources in the Lineage map card. Select the nodes to view additional information.
- View the owners of the secret in the Owners card.
- View an AI-Generated mitigation plan for the risk in the Mitigation Steps card.
- View and copy the risk’s additional details in the Additional data card.
- View and copy
-
View the permissions for the credential in the Permissions tab.
-
Review and understand how the non-human identity was used and see usage evidence of the risk finding in the Activity tab.
-
Review a timeline of the changes impacting risk in the Changelog tab.
-
Managing a Risk
From the Risk Center, you can take action on discovered risks within the risk’s details page.
To manage a risk from the Details page:
-
Go to Agentic Fabric.
-
From the navigation menu, go to the Risk Center.
-
Find and select the Risk Name to view its Details page.
-
Select the status dropdown list to change the status. Choose Open, In Progress, Discarded, Mitigated, Approved, or Resolved.
-
Select the Risk Viewers icon
to review who is watching the risk.
-
Select the Actions dropdown list to act on the risk:
- Select Copy Link to copy a direct link to the risk.
- Select Send via email to send the risk details in an email.
- Select Send via Slack to choose one or more identities and send the risk details in a Slack message to the recipients. This option also sends the details via email in case the recipients do not have SailPoint for Slack configured.
- Select Send via Teams to choose one or more identities and send the risk details in a Microsoft Teams message to the recipients. This option also sends the details via email in case the recipients do not have SailPoint for Microsoft Teams configured.
- Select Revalidate to revalidate the risk.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.