Credential Governance
View User Activity
Help desk agents see what was done to a user's accounts, by whom and when, without searching each system.
Completes when the user's activity entries are displayed or exported.
https://mcp.avatier.com/mcp
Ask in Plain Language
Run View User Activity from the AI Assistant You Already Use
Read-only: nothing is changed. In Avabot and MCP you verify your own identity first, then name the user and read their entries five at a time. One completed lookup = one Secure Outcome; failed attempts are never billed.
You: Show me what happened to jlee's accounts this week. Avatier: verify: passed · user: jlee · dates: last 7 days · showing: 5 entries · more: next page
Why it matters
The Help Desk Needs the History Before It Acts.
When someone calls about a lockout or a changed password, the first question is what happened, and who did it.
What a lookup needs
Every audit-log entry where the user, or any of their mapped accounts, was the target or the person acting, with when it happened, what happened and who performed it.
What goes wrong by hand
Piecing together what happened to an account means searching each system's own logs, one at a time.
What View User Activity does
The agent selects the user, the list opens on the last 30 days, and the agent can change the dates, scroll for more and export to Excel or PDF.
What per-seat pricing charges
Per-seat IAM charges for every licensed seat, whether the help desk looks anything up this month or not. Pay Per Identity Action™ charges only for completed lookups.
The Action
How View User Activity Runs
On the web, View User Activity walks through these screens. In Avabot and MCP you verify yourself, name the user, pick a date window and read the entries five at a time.
Verify in Avabot or MCP
Avabot and MCP only. You prove your own identity in the conversation with one of your MFA methods, or reuse the connector sign-in where that is enabled. The user whose activity you view is not challenged. On the web, your sign-in is enough.
Identity Verification (Avabot and MCP)
Select the User
Help desk agents who hold the View User Activity delegation select a user within their help desk scope. In Avabot, name the user.
Change the Dates
The list opens on the last 30 days. Change the start and end dates; on the current (.NET 10) server you can also narrow by category. In Avabot, pick a date window (30 days by default).
Read the Entries
Each entry shows when it happened, what happened and who performed it. Scroll to load more; in Avabot, entries come five at a time.
Export
Export to Excel or PDF, up to 1,000 entries per export: open or download it on the web, or save or share it in the mobile app.
Available on Web, Mobile, Teams, Avabot chat and MCP.
Avabot chat and MCP require the current (.NET 10) Avatier server.
Secure Outcome
What Counts as Done
A Secure Outcome is a completed, verified, policy-compliant identity action. A lookup completes when the user's activity entries are displayed or exported. Nothing is changed, and the view itself is not logged. One completed lookup = one Secure Outcome.
Evidence
- The user's activity entries, with when, what and who
- An Excel or PDF export of up to 1,000 entries, when you choose one
Guardrails
Your Assistant Asks. Avatier Decides.
Verified First
Avatier verifies the person before sensitive changes, with the methods your policy already allows.
Acts as the Signed-In User
OAuth sign-in to your own tenant. No shared service account, no API key to manage.
Never Makes Up Values
The connector only sends what the person actually said, and asks when something is missing.
Pay Per Identity Action™
Pay per Completed Lookup
Pay per completed lookup. Failed attempts are never billed.
| Compared | Manual or Per-Seat IAM | View User Activity, Pay Per Identity Action™ |
|---|---|---|
| What you pay for | Every licensed seat, whether it acts or not | Completed lookups only |
| Failed attempts | No line between an attempt and a result | Attempts, failures and retries are never billed |
| The work | Manual intervention or tickets | The user's audit-log entries for the dates chosen, across every mapped account |
| Evidence | Silent failures and missing audit trails | The entries themselves, exportable to Excel or PDF |
Pay Per Identity Action™ is in invitation-only preview. Pricing is shared with qualified organizations.
Works with the Record a Lookup Reads
View User Activity reads the Avatier audit log, which covers activity on the user's directory account and on every mapped account in connected systems.
- Avatier audit log
- Connected Systems
- Activity on every mapped account, as Avatier recorded it.
Avatier MCP
New to Avatier MCP?
The Model Context Protocol is an open standard, stewarded by the Linux Foundation, that lets AI assistants call real systems through connectors instead of custom integrations.
Up and Running in Under a Minute
One URL works in every MCP client. Pick yours, copy, paste, sign in.
Microsoft Copilot Studio
Claude Code
OpenAI Codex
Cursor
Frequently Asked Questions
How far back can the help desk see a user's activity?
Any date range the agent chooses. The list opens on the last 30 days.
Can I export it?
Yes, to Excel or PDF, up to 1,000 entries per export.
Can I ask Avabot what happened to someone's account?
Yes, if you hold the View User Activity help desk delegation. Avabot asks whose activity and which dates, then shows five entries at a time.
What is AI-driven configuration?
Avatier's AI-driven config turns plain-language intent into working policy. Rather than hand-coding rules, connectors, and roles, administrators describe what they need and Avatier recommends and sets up provisioning rules, role mappings, and workflows, then validates them before they go live. It shortens deployment from months to days and keeps configuration consistent, auditable, and free of custom scripting.
What is Pay Per Identity Action™?
Pay Per Identity Action™ is Avatier's pricing mechanic. Customers pay only for completed, verified, policy-compliant identity actions, called Secure Outcomes.
Is it the same as pay-per-action advertising?
No. Pay per action (PPA) is performance-marketing vocabulary for paying when an ad converts. Pay Per Identity Action™ charges for completed identity work.
How do I get started?
Getting started is free, deployment services are included, and a 45-day money-back guarantee applies. Contact Avatier for pricing for your organization.
What is MCP?
The Model Context Protocol is an open standard, stewarded by the Linux Foundation, that lets AI assistants call real systems through connectors instead of custom integrations.
How is it billed?
Pay Per Identity Action™ is in invitation-only preview: each completed, verified action is one Secure Outcome, and attempts, failures and retries are never billed.
View User Activity
You've Automated the System. Now Secure the Credentials.
Help desk agents see what happened to a user's accounts, and who did it, before they act.