Custom Dashboards
Custom Dashboards provide a visual reporting layer for identity risk, privileged account hygiene, and access review progress. Dashboards combine pre-built widget templates, custom KPI metrics, and AI-generated insights into presentation-ready views designed for executive reporting and operational monitoring.
Overview
What it is: Custom Dashboards let you build visual reports from pre-configured widget templates or custom KPI definitions. Each dashboard contains one or more widgets that display charts, metrics, and insights based on your synchronized identity data from Hydden Discovery.
Why it matters: Identity governance teams need to answer recurring questions: Are we reducing risk? Is our vaulting program working? Which platforms have the most hygiene issues? Dashboards answer these questions with live data, replacing manual spreadsheet analysis and reducing monthly reporting effort.
Creating a Dashboard
Purpose: Set up a new dashboard to visualize identity risk data.
- Navigate to Dashboards in the left sidebar.
- Click + New Dashboard.
- Enter a Name and optional Description for the dashboard.
- Select a Template to start with pre-configured widgets, or choose Blank to build from scratch.
- Click Create.
Result: The dashboard opens in the canvas view with the selected template widgets or an empty canvas ready for widget placement.
Dashboard Templates
Hydden.Control includes six pre-built dashboard templates:
| Template | Focus | Widgets |
|---|---|---|
| Identity Risk Reduction | Are we getting better or worse? | 4 trend analysis widgets |
| PAM / Vaulting Impact | Vaulting program progress | 4 PAM coverage metrics |
| Privileged Account Hygiene | Orphaned, stale, disabled-but-privileged | 6 hygiene widgets |
| Executive Summary | Overall health and critical metrics | 6 summary widgets |
| Progress & Goals | Campaign and risk reduction progress | 6 progress widgets |
| Operations & Monitoring | Anomalies, insights, and detailed metrics | 9 operational widgets |
Adding Widgets
Purpose: Add visualization widgets to a dashboard.
- Open a dashboard and click + Add Widget.
- Browse the widget library organized by category:
- Risk & Hygiene — Threat scores, privileged accounts, password age
- Executive & Progress — Health scores, insights, campaign progress
- Custom — Widgets linked to your own KPI definitions
- Select a widget to preview its visualization and description.
- Click Add to Dashboard to place the widget on the canvas.
- Drag the widget to reposition it on the grid.
Pre-Built Widgets
Hydden.Control ships with 18 pre-built widgets covering common identity governance metrics:
Risk & Hygiene:
| Widget | Visualization | What It Measures |
|---|---|---|
| High Risk Accounts Over Time | Time Series | Accounts with 70%+ threat score trend |
| Risk Distribution | Pie Chart | Low / Medium / High / Critical breakdown |
| Average Threat Score Trend | Time Series | Mean threat score per account over time |
| Unvaulted Privileged Accounts | Time Series | Privileged accounts not managed by PAM |
| Vaulted Privileged Accounts | Data Point | Admin-classified accounts in PAM |
| High Risk Unvaulted Accounts | Data Point | High-threat accounts not vaulted |
| Orphaned Privileged Accounts | Data Point | Admin accounts with no mapped owner |
| Privileged by Type | Pie Chart | Human vs. service privileged accounts |
| Stale Credentials (90+ days) | Time Series | Accounts with passwords older than 90 days |
| Password Age Distribution | Bar Chart | Password age bucketed by 30/90/180/365+ days |
| Disabled Privileged Accounts | Data Point | Disabled accounts with admin classification |
| Inactive Accounts (180+ days) | Time Series | Accounts with no login for 180+ days |
Executive & Progress:
| Widget | Visualization | What It Measures |
|---|---|---|
| Identity Health Score | Health Score | Composite identity health metric |
| Key Insights | Insights | AI-generated observations and trends |
| Anomaly Detection | Anomalies | Unusual changes in key metrics |
| Campaign Progress | Progress Tracker | Completion toward campaign goals |
| Risk Reduction Progress | Progress Tracker | High-risk account remediation progress |
| Impact Timeline | Impact Timeline | Campaign launches and their metric impact |
Widget Visualization Types
Dashboards support the following chart types:
| Type | Description |
|---|---|
| Time Series | Line chart showing metric values over time with trend indicators |
| Bar Chart | Vertical or horizontal bar chart for category comparisons |
| Pie Chart | Proportional breakdown of categories |
| Data Point | Single-value metric with optional delta indicator |
| Health Score | Composite health gauge with contributing factor breakdown |
| Gauge | Radial gauge for percentage or threshold metrics |
| Heatmap | Color-coded matrix for cross-dimensional analysis |
| Funnel | Stage-based funnel for process completion |
| Radar | Multi-axis chart for comparing dimensions |
| Treemap | Nested rectangles showing hierarchical proportions |
| Table | Tabular data with sorting and filtering |
| Progress Tracker | Goal completion with milestone markers |
| Insights | AI-generated observation cards |
| Anomalies | Detected metric anomalies with severity indicators |
| Impact Timeline | Event markers correlated with metric changes |
Platform Filtering
Dashboards include a platform filter at the top of the canvas. Select a platform (Active Directory, Azure, Linux, Okta, etc.) to re-render all widgets for that platform only. This answers the question "Which platform has the most risk?" without creating separate dashboards per platform.
Dashboard Management
Dashboard List
The Dashboards page shows all dashboards with:
- Search — Filter dashboards by name
- View Modes — Grid view (cards) or table view
- Dashboard name, description, widget count, and last updated date
Dashboard Actions
| Action | Description |
|---|---|
| Edit | Open the dashboard canvas to modify widgets |
| Duplicate | Create a copy of the dashboard |
| Delete | Remove the dashboard permanently |
KPI Definitions
Widgets are powered by KPI (Key Performance Indicator) definitions that specify what data to aggregate and how.
What is a KPI?
A KPI definition configures:
- Entity type — The data entity to query (accounts, owners, groups)
- Aggregation — How to aggregate (COUNT, DISTINCT_COUNT, SUM, AVG, MIN, MAX)
- Filters — Conditions to narrow the data set
- Schedule — When to recalculate (daily, weekly, monthly)
- Buckets — Custom numeric ranges for group-by aggregations (e.g., risk levels 0-30%, 30-70%, 70-100%)
Managing KPI Definitions
Navigate to Settings > KPI Settings to manage KPI definitions.
- View all definitions with status, entity type, aggregation, schedule, and last calculated time.
- Create a new KPI by clicking + New and configuring the entity, aggregation, filters, and schedule.
- Run now to calculate a KPI immediately outside its schedule.
- View results in a detail drawer showing calculated values and linked widgets.
- Toggle active/inactive to pause or resume scheduled calculations.
TIP
KPI definitions are recalculated automatically after each data sync from Discovery. You do not need to manually trigger recalculation after a sync completes.
Bucket Editor
When creating a KPI with a group-by aggregation, use the Bucket Editor to define custom numeric ranges:
- Each bucket has a Label, Min (inclusive), and Max (exclusive) value
- Example: Password age buckets — "Fresh" (0-30), "Aging" (30-90), "Stale" (90-180), "Critical" (180+)
- Without buckets, values are grouped by their raw field value
KPI Detail View
Purpose: Explore the individual accounts that contribute to a KPI result.
After a KPI calculates, click the KPI name or View Details to open the detail view. The detail view is available for KPI definitions that use the Accounts source entity.
The detail view contains two sections:
Risk Summary — Aggregate statistics for all matched accounts:
| Metric | Description |
|---|---|
| Total Accounts | Number of accounts matched by the KPI filters |
| Average Risk Score | Mean threat score across all matched accounts |
| MFA Disabled | Count and percentage of accounts without MFA |
| Password Issues | Accounts with passwords never set, or older than 90 / 180 / 365 days |
| Stale Accounts | Accounts with no login activity in the last 90 / 180 / 365 days |
| Privileged Accounts | Total privileged, highly privileged, and privileged accounts not in a vault |
| Other Risks | Shared accounts, accounts with no owner, breached accounts, and accounts with failed logins |
Account Distribution — Breakdown of matched accounts by status and type:
| Category | Values |
|---|---|
| By Status | Active, Disabled, Suspended |
| By Type | User, Service, Admin |
A Top Risk Accounts list shows the highest-scoring accounts by threat score when the KPI has a defined risk threshold. Use this list to prioritize remediation.
TIP
Run a campaign from the Top Risk Accounts list to queue high-risk accounts for access review. Navigate to Campaigns > + New Campaign and select the relevant platform.
AI-Assisted Dashboard Creation
The AI Assistant can help create dashboards and widgets through natural language:
- Open the AI chat from the floating button
- Describe what you want to see (e.g., "Show me high-risk accounts not vaulted over the last 6 months")
- The AI generates a KPI definition and widget configuration
- Review and add the generated widget to your dashboard
Related Topics
- Settings — KPI Settings — Manage KPI definitions
- AI Search — AI-powered identity queries
- Applications — Application inventory
- Data Sync — Configure data synchronization from Discovery