Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Release notes

Troubleshooting

Guides

Third-party software Contact us

Actor Insights reports

The Actor Insights reports provide visibility into individual machine activities in the context of cloud application usage. These reports help you identify endpoints that generates the most cloud traffic, trigger policy violations, access restricted or risky applications, or use generative AI tools. You can use these reports to conduct activity pattern analysis, incident investigation, and to identify user accounts that may require additional oversight or intervention.

Viewing reports

To navigate to these reports, follow these steps:

  • Select Cloud Protection from the application drop-down at the top of the page.
  • Go to Reports > Actor Insights.
  • Choose a reports and select the desired time range from the Period drop-down.

Available Reports

Report name Description Purpose
Actors by Requests Lists actors ranked by the total number of cloud requests they made. Use this report to identify the most active actors and establish a baseline for normal request volumes.
Policy Violators Lists actors ranked by the number of policy violations they have triggered. Use this report to identify repeat offenders quickly and prioritize actors that require closer review or corrective action.
Actors by Uploads Lists actors ranked by the number of uploads they performed Use this report to identify actors responsible for the highest outbound data transfers.
Actors by Downloads Lists actors ranked by the number of downloads they performed Use this report to identify actors with disproportionately high inbound data transfer activity and investigate whether the downloads are authorized.
Actors by Bandwidth Consumption Lists actors ranked by total bandwidth consumed. Use this report to identify actors generating the highest volume of cloud traffic and detect machines that are involved in disproportionately high volume data transfer activity.
Actors Accessing Non-Business Apps Lists actors ranked by the number of requests made to non-business applications.

Non-business is an internal app classification that includes categories such as social media, gaming platforms, and entertainment services. 		Use this report to monitor personal app usage across your organization and identify actors whose non-work related cloud activity may violate acceptable use policies.
Actors Accessing High-Risk Apps Lists actors ranked by the number of requests made to high-risk applications.

High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. 		Use this report to identify actors whose app usage may be exposing the organization to security threats and determine whether access restrictions are needed.
Actors Accessing Apps Outside Business Hours Lists actors ranked by the number of cloud application requests made outside configured business hours. Use this report to flag after-hours cloud activity that may indicate unauthorized access or compromised accounts.
Actors by Blocked App Access Attempts Lists actors ranked by the total number of attempts to access applications blocked by a control policy. Use this report to identify actors that repeatedly attempts to access blocked applications and prioritize them for closer review.
Actors by GenAI Usage Lists actors ranked by total bandwidth consumed across GenAI applications. Use this report to identify actors who are most actively using AI tools and assess the volume of organizational data being shared with these services.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2026 Zoho Corporation Pvt. Ltd. All rights reserved.