User monitor

The User Monitor tab in Monitoring displays all the logged-in users along with information such as their role, logged-in IP address, the duration they have logged in for, traffic volume, and the timestamp of when they logged in. It is a helpful tool for monitoring the overall activities of the users on FortiPAM. For example, if the administrator sees an unusual amount of traffic from a specific user. It could indicate that a risky operation is being performed, and the administrator may deauthenticate the user if the administrator deems the user is a malicious actor.

For every login; username, IP address, duration, traffic volume, and the last login date and time are displayed.

The User Monitor tab contains the following options:

Deauthenticate	Select to deauthenticate the selected users.
Search	Enter a search term in the search field, then hit Enter to search the user monitor list. To narrow down your search, see Column filter.
Refresh	To refresh the contents, click the refresh icon.