> For the complete documentation index, see [llms.txt](https://docs.apono.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.apono.io/docs/getting-started/access-discovery/analyze-an-assessment.md).

# Analyze an assessment

After an assessment is completed, you can assess your security posture on the **View Assessment** page in both visual and tabular formats:

* Visual widgets highlight key insights from the assessment and also act as interactive filters.
* The table below displays detailed data for each principal and can be filtered using the widgets or additional filter controls.

<figure><img src="/files/oYLxwAsHx2up4O000aZB" alt=""><figcaption><p>View Assessment page</p></figcaption></figure>

***

### Analyze assessment details

Follow these steps to analyze the assessment:

1. On the [**Access Discovery**](https://app.apono.io/access-discovery) page, in the row of an assessment, click **Explore**. The **View Assessment** page opens.

{% hint style="info" %}
The top section of the assessment displays the last assessment date, selected integration, number of accounts, number of identities, number of principals, and the status of the assessment.
{% endhint %}

2. Filter the assessment by clicking a [widget](#widgets) and viewing the details in the [table](#table-principals).

{% hint style="success" %}
Clicking a widget to filter the assessment also selects the corresponding criteria in the dropdown filter menus. You can also apply filters directly through the dropdown filter menus.
{% endhint %}

Each widget and table column is explained in the following sections. After exploring the assessment, you can [investigate and resolve overprivileged access](/docs/getting-started/access-discovery/investigate-and-resolve-overprivileged-access.md).

#### Widgets

<table><thead><tr><th width="219.734375">Widget</th><th>Description</th></tr></thead><tbody><tr><td><strong>Overprivilege</strong></td><td>Represents the percentage of permissions not used by a principal within the selected integration</td></tr><tr><td><strong>Overprivilege over time</strong></td><td>Displays the trend of overprivileged permission over the last seven days split between all permissions and privileged permissions (Admin, IAM)</td></tr><tr><td><strong>Dormant (Unused) Principals</strong></td><td>Number of principals who have been inactive within the last 90 days</td></tr><tr><td><strong>High risk Overprivileged</strong></td><td>Number of principals in the highest tier</td></tr><tr><td><strong>Principals by Resource Type</strong></td><td><p>Number of principals grouped by the following categories:</p><ul><li>IAM Role</li><li>IAM User</li><li>IAM User Access Key</li><li>Secret</li></ul></td></tr><tr><td><strong>Principals by Tier</strong></td><td><p>Number of principals grouped by the following tiers:</p><ul><li><strong>Critical</strong></li><li><strong>High</strong></li><li><strong>Medium</strong></li><li><strong>Low</strong></li></ul><p>Each tier is calculated based on the <strong>Over Privilege</strong> percent, <strong>Risk Score</strong>, and <strong>Privilege Permissions</strong> percentage.</p></td></tr></tbody></table>

#### Table (Principals)

{% hint style="success" %}
You can hover over a row and click **Ignore** to hide principal that you do not consider a threat.
{% endhint %}

<table><thead><tr><th width="219.65625">Column</th><th>Description</th></tr></thead><tbody><tr><td><strong>Principal</strong></td><td>Name of the principal</td></tr><tr><td><strong>Account</strong></td><td>Account associated with the resource</td></tr><tr><td><strong>Risk Score</strong></td><td>Calculation based on the <strong>Principal Risk Level</strong> (maximum score of policy actions sensitivity) and the account risk level</td></tr><tr><td><strong>Identities</strong></td><td>Number of human and machine identities assigned to the resource</td></tr><tr><td><strong>Last used</strong></td><td>Number of days since an identity assigned to the resource used the permissions</td></tr><tr><td><strong>Over privilege</strong></td><td>Percentage of unused permissions for the principal</td></tr><tr><td><strong>Tiers</strong></td><td><p>Calculation based on the <strong>Over Privilege</strong> percent, <strong>Risk Score</strong>, and <strong>Privilege Permissions</strong> percentage.</p><p>Examples:</p><ul><li>If the <strong>Privileged Permissions percentage</strong> is over 60% and the <strong>Risk Score</strong> is greater than 4, the <strong>Tier</strong> will be <strong>Critical</strong>.</li><li>If the <strong>Privileged Permissions percentage</strong> is over 30%, the <strong>Over Privilege percentage</strong> is over 80%, and the <strong>Risk Score</strong> is greater than 4, the <strong>Tier</strong> will also be <strong>Critical</strong>.</li></ul></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.apono.io/docs/getting-started/access-discovery/analyze-an-assessment.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.