Introduction to Employees
The Employees screen provides a comprehensive list of all employees and other users. Here, you can view crucial information such as a user's first and last login times, the computers they've accessed, their current status (e.g., active, idle, locked), whether they are currently being monitored, and if they have Two-Factor Authentication (2FA) enabled, etc.
1. Click the New Employee button to create a new employee. See the Creating a New Employee section below for more information.
2. The report comes with three pinned filters (Monitored, Name, Online) applied by default. You can apply additional filters by clicking the Filters button. Check out the Filters section to learn more about filters.
3. You can click the Checkbox in front of an employee to select one or more employees to perform actions on them, such as enable/disable, archive (delete) them, etc. Check out the Multi-Employee/Batch Actions section to learn more.
4. Click the Three Dots at the corner to access the Context Menu. From the Context menu, you can: reset the dashboard, import employees, export the report as a CSV or PDF.
5. Click the Grid icon to add or remove columns from the report. For instructions on organizing columns and rows within a grid widget, refer to the Adjusting Columns and Rows section.
Here’s a description of each column:
Name: Shows the name of the employee. Clicking the name will take you to the employee's monitoring report. If you see a Warning
icon next to an employee’s name, it means they aren’t licensed. An unlicensed user’s activities will not be monitored even if you have monitoring enabled for them.
Email: Shows the email address of the employee.
Last Login: Depending on the computer's state, this column will display the following:
If the user is offline, it will show the date and time the user last logged in.
If the user is currently online, this column will show "Online".
The column will display "Session locked" if the user locked their computer (i.e., used the Start Menu > User > Lock command), the screen saver was activated, the system went to sleep mode; or if it's a remote desktop session (RDP), the user minimized the RDP window.
Status: Displays the user’s status, such as: “Monitored”/“Not monitored”, "Archived", “2FA”/”No 2FA”, etc.
Licensed: Shows if the user is licensed or not.
Locked: If this column shows “Yes”, it means either an admin used the “Lock” command from the Employee Actions Menu, or the user triggered a behavior rule with the Lock Out User action. See the Employee Actions Menu to learn how to lock/unlock/delete a user.
Phone: Shows the phone number from the employee's profile.
Online: Shows if the user is currently online or not.
Monitored: Shows if the user is currently being monitored or not.
2FA: Shows if 2-Factor Authentication is enabled for the user.
Position: Shows the position of the employee.
Default Task: Shows the default task assigned to the employee (note that you can assign an employee a default task from their profile’s Account tab).
Department: Shows the department the employee belongs to.
Monitoring Profile: Shows the monitoring profile this user belongs to. "Custom profile" means the employee has their own monitoring settings set on their profile. See the Custom Profile section to learn more.
Productivity Profile: Shows the productivity profile the employee belongs to.
Last Login Computer: Shows the computer the user last logged in from.
Access Level: Displays what role (e.g., Employee, Administrator, etc.) is assigned to the user.
Archived: Shows if the employee is archived (deleted) or not. You can archive/unarchive an employee from the Employee Actions Menu.
Creating a New Employee
When you click the New Employee button on the Employees dashboard, a panel on the right side of the screen will let you create the profile. The profile comes with several tabs:
Personal
You can edit personal details like names, email addresses, phone numbers, etc., from this tab.
Important Considerations for Email Address Changes:
Exercise caution when changing an existing employee's email address. Teramind uses the email as part of the employee's unique ID. If the employee is using a Stealth Agent and you change their email address, you might encounter duplicate employee entries on your Teramind Dashboard. If this occurs, please remove the employee associated with the old email ID. You can find the option to remove an employee in the Employee Actions Menu.
Account
Language:
You can set the employee’s language from this field. If the Default value is used, then the global language setting will be used for the employee.
Default Task:
Allows you to set the default task. This is applicable if the employee is using a Stealth Agent. Check out the Configurations > Tasks section to learn how to create tasks for your employees.
Access Level:
Allows you to select the employee’s access level (role) / account type. There are four types of access levels you can choose from:
The Administrator is the most powerful access level. They can monitor all employees, other admins, and change any settings with no restrictions.
The Infrastructure Administrator has access to the system settings but cannot browse any recordings.
The Operational Administrator has access to the system settings, rules, computers, other users, and access control settings of other users.
The Employee cannot change any settings.
Check out this article on our Knowledge Base to learn more about account access levels.
Allow self-history playback:
If enabled, it will let the user playback their screen recordings (see Session Player for more information). If this option isn’t enabled, the user will be able to see just their Snapshots dashboard but won’t be able to play the video.
Allow viewing activity reports:
If enabled, the user will be able to view the Applications & Websites dashboard.
User can clock in and out using Web interface:
If enabled, the user will be able to use the web clock-in feature to log their task and time.
User can login to Teramind Dashboard:
If enabled for a regular user, the user will be able to log into the dashboard and view their own reports.
External user:
Enabling the "External user" option designates this user as an Active Directory user. By default, their domain password will be synchronized from Active Directory using LDAP.
However, if you enable "External user," an additional option, "Don't synchronize from LDAP," will appear. If you select "Don't synchronize from LDAP," the following will happen:
The user's password will no longer be synchronized.
The "New Password" option will not be visible when you subsequently edit the user.
The "Forgot your password?" option on the Dashboard login screen will also not function for these users.
If you are using the LDAP confirmation method for authenticating dashboard changes, you must mark the user as an "External user."
Can see own online presence:
This option is applicable to administrators and privileged users (who have the permission). If enabled, the logged-in user will be able to view their online status on the Online Employees widget, the List of Employees screen, etc. If disabled, the information such as “Last Login”, “Last Login Computer”, etc. columns will not record the user’s status, and they will be shown as empty:
Note that if this option is enabled, then you will be able to toggle the User can clock in and out using Web interface setting (see below).
Disable self snapshots report:
Will disable the Snapshots dashboard.
Disable self productivity report:
Will disable the Productivity dashboard. Otherwise, these reports will be available to the user.
Disable self session report:
Will disable the Login Sessions dashboard for the employee.
Disable daily digest report:
Applicable to users with the Administrator access level. By default, all administrators receive a daily digest email that shows all the users’ activities, such as emails sent, rules violated, etc. If you enable this option, then the admins will not receive the daily digest report. The report looks like this:
Disable self edit:
This option allows you to toggle whether an employee can edit their own profile information, including their name, email address, phone number, etc.
New Password:
This option lets you change the user's account password. If you don't assign a password yourself and instead use the Send Invite & Submit button, the Invite users option on the Agent Download screen, or the Email the invitation to the employee option on the Import Employees screen, the system will automatically generate a temporary password for the user.
LDAP
If the user was imported from Active Directory, you will see their LDAP Attributes. The attributes are read-only.
Monitoring
On this tab, you can configure the monitoring settings for the employee.
1. You can specify which monitoring profile to apply to this employee.
2. Several sub-tabs allow you to adjust individual monitoring options. If you manually change any of these settings, a "Custom profile" will be automatically created and assigned to the employee. Each employee can have their own unique custom profile. A custom profile will override any other monitoring profile(s) the employee is part of.
For more detailed information about monitoring profiles and settings, please refer to the Monitoring Profiles section.
Saving & Inviting the Employee
You can click the Submit button anytime to save an employee's details. Keep in mind, though, that you might need to fill out the information on other tabs (like Account or Monitoring) for the employee to be properly monitored or managed.
To save the employee's information and send them an email invitation to install the Teramind Agent at the same time, click the Send Invite & Submit button.
Editing an Employee / Employee's Profile
You can edit an employee's profile by selecting the Edit Profile option from the Employee Actions Menu.
Editing a profile is similar to the process of creating a new employee.
Importing Employees
To add several employees quickly, you can import their information from a CSV file instead of entering each one manually.
1. Click the Three Dots at the corner of the Employees dashboard to access the Context Menu. From the Context menu, select Import employees. The Import Employees panel will open on the right side of the screen:
2. Click the Upload a file link or drop a CSV file directly on the Upload CSV section. You will see a confirmation message and a System Alert when the upload is completed:
3. If you want, you can click the Download Template (CSV) button to download a sample CSV file that shows you how the CSV file should be formatted before you upload it.
4. Alternatively, you can click the Required CSV Fields button and map the fields. Clicking the button will expand the section to let you map the fields with the columns in your CSV file:
Tenant means the instance name of your deployment. It’s the first part of the URL of your dashboard. For example, if your dashboard URL is https://acme.teramind.co
, then your tenant/instance name is “acme
”.
5. You can turn on the Email the invitation to the employee option to send out email invitations to the employees to install the Teramind Agent. The email will look like this:
Note that the password will be automatically generated for the employee. The user will be asked to change their password when they log in for the first time.
6. Click the Add Employees button to begin the import process.
If there are any errors in your CSV file, a System Alert will appear, explaining what went wrong. For instance, if an employee's "Position" field in the CSV is set to "administrator," but "administrator" isn't a recognized position in the system, you'll get an error:
If your CSV file is valid, you'll see a success message, and the import window will automatically close:
When importing employees, make sure:
The CSV file is properly formatted.
Columns like the Tenant, Position, etc., exist in the system.
There are no existing employees with the same email, or there are no duplicate emails in the CSV.
We suggest you download the template to have an idea of how the fields should be formatted in the CSV file.
Viewing an Employee’s Details / Monitoring Reports
Click on an employee’s name on the Employees dashboard to access the employee’s detailed monitoring reports.
Activity Log
1. On top of the screen, you will see several tabs. These tabs are similar to the built-in dashboards available under the Dashboard menu. For more information about each tab, check out the sections below.
2. The second set of options lets you apply filters. The report comes with two pinned filters (Computer and Date) applied by default. You apply additional filters by clicking the Filters button. Check out the Filters section to learn more about filters.
3. You can turn monitoring on/off for the employee by clicking the Monitor toggle button.
4. Click the Add/Remove Time button to manually add or remove time. This works similarly to how you add/remove time on the Live View > Snapshot dashboard.
5. Click the Edit Profile button to edit the employee’s profile, such as their personal information, account, and monitoring settings.
6. The Dashboard Actions Menu on the Employee's details dashboard comes with standard actions letting you archive and reset the dashboard, and export the data as a CSV file.
7. On the left side of the screen, just under the filters, you will see the employee's basic profile information and their online status.
8. The Active Behavior Policies section shows what behavior policies are currently being enforced on the employee. You can hover over a policy to view the rules under it.
If the policies don’t fit on the screen, you will see a See all applied policies button. Clicking it will open a panel showing all the active policies:
Click on a policy name to expand it - show rules under it. Click again to collapse it.
Clicking the Open icon next to a rule will open it in the Rules Editor on a new tab, where you can modify the rule.
9. Click the Three Dots in front of a row to access its Context Menu. From the Context menu, you can:
a. Show details record: will open an Activity panel on the right side of the screen, where you can see detailed info about an activity. You can also view the screen recording of the activity or print the details by using the View Record and Print buttons on this panel.
b. View Record: will launch the Session Player so that you can view the video recordings. Note: you can also click the Movie Camera icon next to a timestamp to view the screen recording.
c. Classify Activity: will open the Classify Activity panel, where you will be able to classify the apps/websites. See the Classifying Applications and Websites as Productive/Unproductive section to learn more.
10. Click the Grid icon to add or remove columns from the report. For instructions on organizing columns and rows within a grid widget, refer to the Adjusting Columns and Rows section.
While most columns and data points in the grid widget are self-explanatory, certain productivity time metrics (e.g., Productive Time, Unproductive Time) may require further explanation. You can find more information about these in this Knowledge Base article.
Session Log
This tab shows the employee’s login session activities, such as which computer they logged in from, IP, login time, etc. It’s similar to the Login Sessions dashboard.
Time Worked
This tab shows the employee’s work time and activity levels, such as active time, idle time, etc. It has columns similar to the Productivity dashboard.
Alerts
This tab shows behavior rule violation alerts. It’s similar to the Behavior Alerts dashboard.
Snapshots
This tab shows screen recordings of the employee. It’s similar to the Live View > Snapshots dashboard.
Emails
This tab shows the employee’s email activities. It’s similar to the Emails dashboard.
File Transfers
This tab shows the employee’s file activities, such as Access, Read, Write, Upload, etc. It’s like a combined dashboard of File Events and Web File Events dashboards.
Printing
This tab shows the employee’s printing activities. It’s similar to the Printing dashboard.
Keystrokes
This tab shows the employee’s keystroke activities. It’s similar to the Keystrokes dashboard.
Employee Actions Menu
Single Employee Actions
To access an employee's Actions menu, click the Three Dots icon next to their name. Here's what you can do:
Edit Profile: Select this option to modify an employee's profile. You can also achieve this by clicking directly on the employee's name. A panel will appear on the right, allowing you to edit their personal information, account settings, and monitoring options. Editing a profile is similar to the process of creating a new employee.
Open Profile in a New Tab: This option lets you view the employee's activity reports in a separate tab.
View Live: If the employee is currently online, this option will be available, allowing you to view their desktop in real-time. This opens the Session Player in Live View mode.
Enable Monitoring / Disable Monitoring: Use these options to turn monitoring on or off for the employee.
Disable 2FA: This option appears if an employee has Two-Factor Authentication (2FA) enabled, allowing you to disable it.
Archive / Restore: Choose Archive to remove the employee from all dashboards and reports. The Restore option will bring the employee back.
When you archive employees, they aren't permanently deleted, but rather hidden from the employees list and all monitoring reports. Monitoring is also disabled for archived employees. Archiving an employee will also free up a license.
Lock / Unlock: The Lock option will lock the employee's computer. The "Locked" column in the employees list will update to reflect this status. When an employee's account is locked, they will be unable to log back into the monitored computer. The Unlock option will unlock an employee's account that was previously locked either by the "Lock" option or by a Behavior Rule's Lock User action.
The Lock/Unlock action only works on the Stealth Agent. By design, these actions will not be enforced on the Revealed Agent. Please also note that the lock feature isn’t a full protection from user tampering. It has the following limitations:
Only the selected user account will be locked out. If there are other users on the computer, they will be able to log in.
The user may be able to log in using the Windows Recovery mode.
The user may be able to take out the disk and connect it to another computer and access data.
Multi-Employee/Batch Actions
1. Select one or more employees by clicking the Checkbox in front of an employee's name.
2. An Actions menu will be shown near the top-right corner. From the menu, you can select an action such as enable/disable monitoring, archive (delete) the employees, etc. The actions are the same as the Single Employee Actions. Once you've selected an action, the Apply button will become available:
3. Click the Apply button to apply the action.