Reference

Claude User

All Claude users

Part of the Anthropic inventory.

Scan settings

Default scanning intervalAllowed scanning intervalsData removal during incremental scan
DailyDaily, Weekly, Bi-Weekly, Monthly, Never, InitialYes

Properties

Property Type Description Automation placeholder
Added at DateTime Datetime string indicating when the User joined the Organization. {{ClaudeUser.AddedAt}}
Key String Internal. {{ClaudeUser.ApiKeyEncrypted}}
Code Costs Last 30 Days Double Costs of workflow executions within the last 30 days. {{ClaudeUser.CostsLast30Days}}
Code Costs Last 7 Days Double Costs of workflow executions within the last 7 days. {{ClaudeUser.CostsLast7Days}}
Code Costs Last Month Double Costs of workflow executions last month. {{ClaudeUser.CostsLastMonth}}
Code Costs This Month Double Costs of workflow executions this month. {{ClaudeUser.CostsThisMonth}}
M365 User Country String Country of the M365 user in Entra ID. {{ClaudeUser.Country}}
Initially Scanned DateTime Shows when this object was initially found in a scan. {{ClaudeUser.CreatedTime}}
M365 User Department String Department of the M365 user in Entra ID. {{ClaudeUser.Department}}
Display Name String {{ClaudeUser.DisplayName}}
Email String Email of the User. {{ClaudeUser.Email}}
ID String ID of the User. {{ClaudeUser.Id}}
M365 User is guest Boolean True if user is external user in Entra ID. {{ClaudeUser.IsExternal}}
Last scan update DateTime Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. {{ClaudeUser.LastModifiedTime}}
Risk Score Int32 Stores risk score {{ClaudeUser.RiskScore}}
Risk Score Update DateTime Stores risk score update {{ClaudeUser.RiskScoreLastUpdate}}
Risk Score Value String Stores risk score value like Low_Low {{ClaudeUser.RiskScoreValue}}
Organization Role String Organization role of the User. Allowed values: admin, billing, claude_code_user, developer, managed, user. {{ClaudeUser.Role}}
Total Cost Double Total cost of all workflow executions in this project. {{ClaudeUser.TotalCost}}
M365 User User Related user in M365 Entry ID. {{ClaudeUser.User}}
M365 User Name String Related user in M365 Entry ID. {{ClaudeUser.UserName}}

Relations

Relation Service Description
Claude API Key Anthropic All Claude users
Claude Code Usage Anthropic Reports usage of Claude Code
Claude Workspace Anthropic Workspaces in which the user is a member
User Microsoft 365 All users registered in your tenant (internal, external)

Segments

Segment Description
Claude Admin Users Shows all users with admin role
Claude Code Users Shows users with Claude Code role
Claude Developers Shows users with developer role
External Users Shows users flagged as external in Entra ID
Internal Users Shows internal corporate users
Claude Standard Users Shows users with standard user role

Actions

  • Delete User Account
Policy Severity Description
Claude Code user exceeds the costs limit High Detects users of Claude Code which are causing to high costs
Claude Code user is disabled in Entra ID Medium Detects Claude users which have been disabled in Entra ID and should be removed
External users in Claude organization Medium Detects users flagged as external in the corporate directory who have Claude access
User has admin role High Admins have organization-wide reach, raising the likelihood that an access issue has serious impact
External (guest) user High External guest accounts are a common attack vector, raising the likelihood of risky access
Claude User is not member of Entra ID Medium Detects users in Claude organizations which are not part of Entra ID
Inactive Claude Code users Medium Detects users that are not using Claude Code in the last 90 days

Last updated: 7/19/2026