: View Third-Party Plugin Users for One Marketplace App
Focus
Focus

View Third-Party Plugin Users for One Marketplace App

Table of Contents

View Third-Party Plugin Users for One Marketplace App

The Users tab shows the users who installed third-party plugins. Use this information to identify usage risks posed by individual users
If supported by the SaaS marketplace app, you can examine the users who installed third-party plugins. This information will help you to identify usage risks posed by individual users. In Slack, plugins are installed to a workspace and are then accessible to all members of the workspace. For this reason, when viewing a Slack app, you can examine workspaces instead of users. User information is not available for Atlassian or Zoom.
  1. Navigate to the third-party plugins for a marketplace app. Do one of the following:
    • Navigate to the third-party plugins from the dashboard:
      1. Select Posture SecurityDashboard, and locate the Applications by 3rd Party Plugins area. This area shows the marketplace apps that have the most unreviewed plugins. The area shows the number of unreviewed plugins for each app.
        Investigate each unreviewed plugin to judge whether it threatens your organization's security.
      2. For the marketplace app whose third-party plugins you want to review, click the Unreviewed Plugins link.
    • Navigate to the third-party plugins for a marketplace app from the Applications page.
      1. Select Posture SecurityApplications.
      2. Locate the SaaS app, then View Details.
      3. Select the Connected Applications tab.
  2. Select the Users tab. For Slack, select the Workspaces tab.
    The table on this page lists the users or workspaces that have connected plugin applications. The table displays information for each plugin, such as the email address of the user or workspace owner, the number of connected applications for the user or workspace, and the number of connected applications by application severity.
    Click the table's download icon to export the table information to a CSV file.
  3. Select the name of the user or workspace whose third-party plugin usage you want to review.
  4. Take action on the third-party plugin.
    For example, from the Actions column you can Revoke Access for the user. Whether the Revoke Access action is available depends on the level of permission that SSPM has to the marketplace app, and on the capabilities that the marketplace app's API provides. If the Revoke Access action is not available, you can instead log in to the SaaS app's administration console, and follow its documentation to remove the plugin.