Inventory Guide for Agent Risk Manager

The Inventory page shows what AI agents in your organization can do, what they have done, and which people they did it for. This article explains how your inventory works, how to access the Inventory page, and how to review your inventory.

For general information about Agent Risk Manager, see our product overview.

How Inventory Works

Agent Risk Manager builds your inventory from the AI activity in your connected integrations. The Inventory page uses the following terms:

• Access: Something AI can do in one of your apps, such as sending an email or editing a file. Each type of access displays once, even when several agents have it.
• Surface: Where the AI runs. Some surfaces run named agents, and others start their own agents without a name.
• Access level: Whether the access reads data, changes data, or sends or shares data. Access that sends or shares data can move it out of your organization.

Access Inventory

How you access Inventory depends on whether you use the classic KnowBe4 console or the KnowBe4 Platform. Follow the steps in the matching subsection.

Classic KnowBe4 Console

To access Inventory from the classic KnowBe4 console, follow these steps:

1. Log in to your classic KnowBe4 console.
2. In the top-left corner of the screen, select the grid icon. A drop-down menu will display.
3. In the drop-down menu, select Agent Risk Manager.
4. In the sidebar, select Discovery, then select Inventory.

KnowBe4 Platform

To access Inventory from the KnowBe4 Platform, follow these steps:

1. Log in to your KnowBe4 Platform.
2. In the sidebar, select Agent Risk Manager.
3. Under Discovery, select Inventory.

Review Inventory

At the top of the Inventory page, the following metrics summarize the entries on the Access tab:

• Can send or share: Shows the number of entries that can send or share data.
• Used from outside: Shows the number of entries used for people who aren't in your directory, such as people with personal email accounts.
• New in the last 7 days: Shows the number of entries that Agent Risk Manager first discovered in the last seven days.
• Access not used in 30 days: Shows the number of entries that no one has used in the last 30 days.

These metrics count every entry on the Access tab, even when you search or filter the table. To filter the Access table by a single metric, select that metric's card.

To load the latest data, select the refresh icon in the top-right corner of the page.

From the Inventory page, you can review access, view access details, review surfaces, or view an agent's details. For more information, see the subsections below:

Review Access

The Access tab shows a table with one entry for each thing AI can do in your apps. By default, the table lists the riskiest entries at the top. The table includes the following columns:

• Access: Shows what the AI can do, such as Generate Social Post. If the provider uses a different technical name, the technical name displays below.
• App: Shows the app the access applies to, such as Email or Files.
• Level: Shows the access level: Send or share, Change, or Read.
• Surface: Shows each surface where the access was used.
• People: Shows the number of people who used the access in the last 30 days. If any of these people aren't in your directory, the Outside user badge displays.
• Last used: Shows how long ago the access was last used. If it wasn't used in the last 30 days, Not used in 30 days displays.
• Flagged: Shows how many times a detection policy flagged data that the access handled in the last 30 days. For example, a policy might flag sensitive data in an outgoing email. For more information, see our Data Detection Policies Guide.

To find an entry, use the following options:

• Search: Search by access name, technical name, app, or tenant.
• Filters: Filter the table with the Access level, Surface, and People drop-down menus. To filter by App, Activity, or First seen, select + More Filters.

View Access Details

To view more information about an entry, select it in the table. A side panel will display with the entry's name, description, and the following tabs:

• Overview: Shows the access level, how often the access was used, how many times it was flagged, and its surfaces. If the access was used for someone outside your directory or was flagged, an alert displays at the top of the tab. The Used through section lists the agents that used the access. To view an agent's owner, people, last use, and other access, expand the agent by selecting the dropdown arrow to the right of its name.
• People: Shows each person who used the access, with their name, email address, number of uses, and when they were last active.

To review the activity behind an entry, select Open AI Activity Log. To review your detection policies, select Open Detections. For more information, see our AI Activity Log Guide and Data Detection Policies Guide.

Review Surfaces

The Surfaces tab shows a table with one entry for each surface where AI runs in your organization. By default, the table lists the surfaces with the riskiest access first. The table includes the following columns:

• Surface: Shows the name of the surface and its provider.
• Discovered: Shows the number of agents that Agent Risk Manager discovered on the surface. To see each agent and its access level, hover over the number.
• Highest level: Shows the highest access level on the surface.
• Access: Shows the number of Access entries on the surface.
• People: Shows the number of people who used the surface in the last 30 days.
• Last used: Shows how long ago the surface was last used.
• Actions: Shows a button that opens the surface's page.

To find a surface, search by surface name, provider, or agent name.

To view the agents on a surface, select the surface's entry. The surface's page will display with its agents grouped by access level.

View an Agent's Details

To view more information about an agent, select the agent on a surface's page in Inventory, or the agent's card on the Dashboard. A side panel will display with the agent's name and the following tabs:

• Overview: Shows a summary of the agent, its risk, and details such as when Agent Risk Manager discovered it.
• Access: Shows what the agent can do, grouped by app. Entries that change or send data are listed first.
• People: Shows who created the agent and who used it.