The Employees screen displays all users and their current status, login history, assigned computers, and other details. You can also manage users directly by enabling or disabling monitoring, locking or unlocking computers, editing profiles, and archiving or restoring accounts, etc.

1. Click the New employee button to create a new employee. See the Creating a New Employee section below for more information.

2. The report comes with three pinned filters (Monitored, Name, Online) applied by default. You can apply additional filters by clicking the Filters button. Check out the Filters section to learn more about filters.

3. Click the Grid icon to add or remove columns from the report. For instructions on organizing columns and rows within a grid widget, refer to the Adjusting Grid Columns and Rows section.

Here’s a description of each column:

4. Click the Three Dots at the corner to access the Dashboard Actions menu. From the menu, you can: import employees and export the employee list as a CSV file.

5. Click the Three Dots in front of a row to access the Employee Actions menu. From the menu, you can perform various actions on the employee, such as enable/disable monitoring, lock/unlock their computer, edit profile, archive/restore, etc. Check out the Single Employee Actions section to learn more.

6. You can click the Checkbox in front of employees to select multiple employees to perform batch actions on them. Check out the Multi-Employee/Batch Actions section to learn more.

When you click the New Employee button on the Employees dashboard, a panel on the right side of the screen will let you create the profile. The profile comes with several tabs:

The Personal tab holds the employee's identity (name, email, photo), the master switch for dashboard access, and their business details (department, position, and pay rate used for cost calculations).

Avatar: Optionally, upload a profile photo for the employee. Click Upload and choose an image - JPEG and PNG files are supported. If no photo is uploaded, the employee's initials are shown instead. When editing an employee who already has a photo, a Remove button appears next to Upload so you can delete it.

First Name / Last Name: The employee's first and last name. These names appear throughout the dashboard - in reports, widgets, the Employees list, and screen recordings.

Email: The employee's email address. This is their login identity for the dashboard and where invitations and reports are sent. For employees using a Stealth (Hidden) Agent, the email field is locked when editing - click Change email next to the field to unlock it*.

Phone: Optionally, enter the employee's phone number.

User can login to Teramind Dashboard: Select Yes to allow the employee to log into the dashboard and view their own reports, or No to keep them as a monitored-only user with no dashboard access. This is the same setting as the User can login to Teramind Dashboard checkbox on the Account tab - changing it in either place updates the other. Click the question-mark icon next to the section title for an in-app explanation.

Department: Select the department the employee belongs to. Departments are used for grouping and filtering in reports and dashboards (for example, comparing work time or spend by department). If the department isn't listed, add it first on the Departments page. You can also assign or update an employee's department on the Departments page itself - updating a department from either place will overwrite the previous assignment.

Position: Select the employee's job position. The list is searchable - start typing to filter it. To create a new position on the spot, click the small Plus (+) button next to the field, type the position name, and confirm; the new position is added to the list and selected. Positions can also be managed on the Positions page.

Rate: Optionally, enter the employee's pay rate as a number, then choose the rate type: per hour or per year. The rate is used to calculate labor cost - the system multiplies it by the employee's recorded work time to produce the wage/spend figures shown in dashboards and reports (for example, the Spend by Department and Spend by Employee widgets, and payroll reports). A yearly rate is converted to an hourly rate using 2,000 working hours per year (40 hours/week × 50 weeks). Maximum allowed values are $10,000,000 per hour or $100,000,000 per year.

The Account tab controls the employee's working context (default task), their access level (role), what they can see and do in the dashboard (permissions), their interface language, and their password.

Allows you to set the default task. This is applicable if the employee is using a Stealth Agent. Check out the Configurations > Tasks section to learn how to create tasks for your employees.

Allows you to select the employee's access level (role) / account type. A short description of the selected level is shown below the field (for example, "User has access only to their own tasks" for the Employee level). There are four types of access levels you can choose from:

Check out this article to learn more about account access levels.

User can login to Teramind Dashboard: If enabled for a regular user, the user will be able to log into the dashboard and view their own reports.

Allow viewing activity reports: If enabled, the employee can view their own activity reports in the dashboard. This also controls access to Apps & Web activity data in widgets and dashboards, since the underlying data source is gated by the same permission. Requires the User can login to Teramind Dashboard to be enabled.

External User: Enabling this option designates this user as an Active Directory user. By default, their domain password will be synchronized from Active Directory using LDAP. If you are using the LDAP confirmation method for authenticating dashboard changes, you must mark the user as an External user. Note that when you enable this option, an additional setting, Don't synchronize from LDAP - becomes available (see below for details).

Can see own online presence: If enabled, the employee can see their own online/presence status (whether they are shown as online) in the dashboard.

Allow self-history playback: If enabled, the employee can play back their own recorded sessions (screen recording history) in the dashboard.

User can clock in and out using Web interface: If enabled, the employee can clock in and clock out from the web dashboard, for time tracking purposes.

Don't synchronize from LDAP: Available for External users. If you enable this option, the following will happen:

Disable Self Snapshots Report: If enabled, the employee will not be able to access the Snapshots dashboard.

Disable Self Productivity Report: If enabled, the employee will not be able to access the Productivity dashboard (including Time Worked). This also removes work-time and input-activity data from widgets and dashboards, since the underlying data sources are blocked as well.

Disable Self Session Report: If enabled, the employee will not be able to access the Login Sessions dashboard. This also removes Sessions data from other places it could appear - for example, the Sessions event type in All Events grids and any custom widget built on the Sessions data source.

Disable Daily Digest Report: Applicable to users with the Administrator access level. By default, all administrators receive a daily digest email that shows all the users' activities, such as emails sent, rules violated, etc. If you enable this option, then the admins will not receive the daily digest report. The report looks like this:

Disable Self Edit: This option allows you to toggle whether an employee can edit their own profile information - specifically their name, avatar, phone number, and email address. This restriction does not apply to users with an Administrator access level.

Sets the dashboard interface language for this employee. The default option, Instance's Default, follows the instance-wide language setting.

This feature allows you to reset or change the password. For new employees, leave the field blank and the system automatically generates a temporary password. Any new password must adhere to the complexity rules defined under Configurations > Settings > Authentication > Password. Failure to meet these requirements will result in an "Invalid value" error.

The Access Control tab allows you to turn a regular user (Employee access level) into a privileged user by assigning a Role-Based Access Control (RBAC) Policy to them.

To assign roles:

1. Click the + Add role button to add a role. You can add multiple roles if needed.

2. Select a Role Access Control Policy from the Role dropdown list (see the Creating a Role Access Control Policy section to learn how to create new roles).

3. Click the Select targets button. You will now be able to select targets to grant access to:

4. Select targets (such as Employees, Computers, or Departments) from the Add target dropdown list. These entities define what the privileged employee (whose profile you are currently editing) can access. Selected targets (e.g., “Rob Dcruse”, “macbook air m1”, “Sales” in the example screenshot above) appear as removable tags above the dropdown.

5. Click the Remove button to delete a role along with its assigned targets.

6. To add more roles and targets, repeat steps 1 – 5.

The Attributes tab displays synced attributes from your directory integrations (Active Directory, Entra ID, etc.) in read-only format. It gives administrators a quick, centralized view of the identity attributes associated with an employee from your organization's directories - helpful for validating that the right attributes were synced after an import, troubleshooting group or policy assignment issues, and supporting audit, compliance, or forensic reviews without needing direct access to your directory.

Each synced directory attribute appears as a key/value pair. For example: “accountType: Service”, “givenName: Abigail”.

Which attributes appear here is controlled by the directory integration's Import attributes setting on the Configurations > Settings > Active Directories integration screen. Only attributes selected there are synced and shown under this section.

Lists the directory groups the employee belongs to. For example: "Domain Users", "Project D039", etc. The groups shown here reflect the employee's group memberships in your directory, synced by the integration on the Configurations > Settings > Active Directories screen, and update with every import or scheduled sync. If you don't see expected groups here, check the integration's Import users and computers from OUs selection on that screen. Groups outside the imported OUs won't sync.

The Authentication tab shows the employee's two-factor authentication (2FA) status and lets an administrator turn 2FA off if needed. It is available only when editing an existing employee.

2-factor authentication via authenticator app: Shows whether the employee has enabled app-based two-factor authentication. If enabled, click the Disable button to disable it.

2-Factor authentication via Email: Shows whether the employee has enabled email-based verification. If enabled, click the Disable button to disable it.

On this tab, you can configure the monitoring settings for the employee.

1. You can specify which monitoring profile to apply to this employee.

2. Several sub-tabs allow you to adjust individual monitoring options. If you manually change any of these settings, a "Custom profile" will be automatically created and assigned to the employee. Each employee can have their own unique custom profile. A custom profile will override any other monitoring profile(s) the employee is part of.

For more detailed information about monitoring profiles and settings, please refer to the Monitoring Profiles section.

You can click the Submit button anytime from the Create Employee or Edit Employee panel to save the employee's profile (provided you have filled out all mandatory fields).

To save the employee's information and send them an email invitation to install the Teramind Agent at the same time, click the Send Invite & Submit button.

You can also invite the employee from these places:

You can edit an employee's profile by selecting the Edit Profile option from the Employee Actions Menu.

Editing a profile is similar to the process of creating a new employee.

To add several employees quickly, you can import their information from a CSV file instead of entering each one manually.

1. Click the Three Dots at the corner of the Employees dashboard to access the Context Menu. From the Context menu, select Import employees. The Import Employees panel will open:

2. Click the Upload a file or drag and drop link or drop a CSV file directly onto the Upload CSV section.

3. (Optional but recommended) Click the Download Template (CSV) button to download a sample CSV file that shows you how the CSV file should look like.

4. Once the upload is completed, Teramind will automatically try to map its internal fields (e.g., First Name, Last Name, etc.) with the fields from your uploaded CSV. You can override the mapping by selecting the fields from the Uploaded Field column.

5. You can turn on the Email the invitation to the employee option to send out email invitations to the employees to install the Teramind Agent. The email will look like this:

Note that the password will be automatically generated for the employee. The user will be asked to change their password when they log in for the first time.

6. Click the Add Employees button to begin the import process.

If the import succeeds, a message shows how many employees were imported. If there are errors in your CSV file, an error message explains what went wrong and, where applicable, the line (row) of the CSV that caused it. Errors are reported per row: valid rows are still imported, and only the problem rows are rejected. For example, if an employee with the same email address already exists in the system, that row fails with an "Email is already in use" error and the existing employee is left unchanged:

Click on an employee’s name on the Employees dashboard to access the employee’s detailed monitoring reports.

The Activity tab shows a chronological record of the employee's app and web activity for the selected date range. If the employee is monitored on multiple computers, it shows combined data from all of them. The tab comes with an activity % chart, an hourly keyboard/mouse heatmap (activity % by hour), and top tasks performed (measured in total work hours), followed by a detailed event grid logging timestamp, computer, app/domain accessed, duration, and other details for each recorded session.

1. At the top-left corner, you will see the employee’s name and their online/offline status. If the employee is online, you can click the Live button to watch their desktop live on the Session Player. If the computer is offline or Live View is unavailable for any reason (e.g., missing Mac screen recording permissions) - you will see when the employee was last online instead.

Under the employee’s name, you will see their basic profile information such as email address, department, phone number, etc.

2. You can turn monitoring on/off for the employee by clicking the Monitor toggle button. Turning monitoring off for an employee frees up a license.

3. The Actions menu lets you perform several actions:

4. The Export menu (where available) lets you export the dashboard:

5. Click the Edit profile button to edit the employee’s profile, such as their personal information, account, and monitoring settings.

6. Below the employee’s info, you will see several tabs. These tabs are similar to the Preset dashboards available under the Dashboards menu. For more information about each tab, check out the sections below.

7. On top of the main widget area is the filters section. Each tab on the dashboard comes with a few pinned filters applied by default. You can apply additional filters by clicking the Filters button. Check out the Filters section to learn more about filters.

8. On the grid widget, click the Three Dots in front of a row to access its Context Menu. You can also access it by right-clicking directly on a row. From the Context Menu, you can:

9. Hover over a widget to reveal the actions you can apply to the widget:

a. Click the Grid icon at the top right corner of a grid widget to open/close its settings panel. From this panel, you can select which columns to show on the grid, create row groups, sum the number of items, etc. See the Adjusting Grid Columns and Rows section to learn more.

b. Click the Filter icon to apply filters to a widget independently of the dashboard filters. The filters work similar to the Dashboard Filters but the scope is applied to the sleeted widget only.

c. Click the Expand icon to expand/maximize the widget in a pop-up window.

This tab shows the employee’s login session activities, such as which computer they logged in from, IP, login time, etc. It’s similar to the Login Sessions dashboard.

Tracks an employee's work time, idle time, activity level, and compensation. For in-depth hour tracking, use the Time Cards dashboard; for productivity and performance analysis, head to the Productivity dashboard. Simply filter either dashboard by employee name to view individual metrics or compare results across team members.

This tab shows behavior rule violation alerts. It’s similar to the Behavior Alerts dashboard.

This tab shows screen recordings of the employee. The tab come with a few additional options:

1. Use the Computer selection drop-down list to select the computer whose recordings you want to view.

2. Use the Snapshot per row selection to choose how many thumbnails or previews are displayed.

3. Click the Add/Remove Time button to manually add or remove time from the employee’s records. This functions similarly to adding or removing time from the Time Cards dashboard.

4. Hover over an empty time slot and click Add Time to add manual time to the employee’s record, similar to how you would add time from the Time Cards dashboard.

5. Hover over an time slot and click the Trash Can icon remove time from the employee’s record, similar to how you would remove time from the Time Cards dashboard.

Click a thumbnail to launch the Session Player, where you can view the video recording for the session.

This tab shows the employee’s email activities. It’s similar to the Emails dashboard.

This tab shows the employee’s file activities, such as Access, Read, Write, Upload, etc. It’s like a combined dashboard of File Events and Web File Events dashboards.

This tab shows the employee’s printing activities. It’s similar to the Printing dashboard.

This tab shows the employee’s keystroke activities. It’s similar to the Keystrokes dashboard.

This tab shows the employee’s online meeting sessions. It’s similar to the Online Meetings dashboard.

This tab shows the history of all computers used by the employee. It’s similar to the Computers dashboard.

To access an employee's Actions menu, click the Three Dots icon next to their name. The menu offers the following actions:

1. Select one or more employees by clicking the Checkbox in front of an employee's name.

2. An Actions menu will be shown near the top-left corner. From the menu, you can select an action such as enable/disable monitoring, archive the employees, etc. The actions are the same as the Single Employee Actions except for the Bulk edit option – it’s only available when you select employees via the checkboxes.

You can edit an employee's profile by selecting the Edit Profile option from the Employee Actions Menu:

Editing a profile is similar to the process of creating a new employee.

You can use the Bulk Edit feature to update common profile attributes such as department, position, account access level, etc. for multiple employees together - saving time on repetitive edits, especially for large teams and departments.

1. Select the Checkboxes next to the employees you want to update.

2. Click the Actions menu to open it, and then select Bulk Edit.

3. Click a tab (e.g., Personal or Account) to edit the information for that section of the profiles.

4. Make your changes and click the Apply changes button.