# Analyze an assessment

After an assessment is completed, you can assess your security posture on the **View Assessment** page in both visual and tabular formats:

* Visual widgets highlight key insights from the assessment and also act as interactive filters.
* The table below displays detailed data for each principal and can be filtered using the widgets or additional filter controls.

<figure><img src="/files/oYLxwAsHx2up4O000aZB" alt=""><figcaption><p>View Assessment page</p></figcaption></figure>

***

### Analyze assessment details

Follow these steps to analyze the assessment:

1. On the [**Access Discovery**](https://app.apono.io/access-discovery) page, in the row of an assessment, click **Explore**. The **View Assessment** page opens.

{% hint style="info" %}
The top section of the assessment displays the last assessment date, selected integration, number of accounts, number of identities, number of principals, and the status of the assessment.
{% endhint %}

2. Filter the assessment by clicking a [widget](#widgets) and viewing the details in the [table](#table-principals).

{% hint style="success" %}
Clicking a widget to filter the assessment also selects the corresponding criteria in the dropdown filter menus. You can also apply filters directly through the dropdown filter menus.
{% endhint %}

Each widget and table column is explained in the following sections. After exploring the assessment, you can [investigate and resolve overprivileged access](/docs/getting-started/access-discovery/investigate-and-resolve-overprivileged-access.md).

#### Widgets

<table><thead><tr><th width="219.734375">Widget</th><th>Description</th></tr></thead><tbody><tr><td><strong>Overprivilege</strong></td><td>Represents the percentage of permissions not used by a principal within the selected integration</td></tr><tr><td><strong>Overprivilege over time</strong></td><td>Displays the trend of overprivileged permission over the last seven days split between all permissions and privileged permissions (Admin, IAM)</td></tr><tr><td><strong>Dormant (Unused) Principals</strong></td><td>Number of principals who have been inactive within the last 90 days</td></tr><tr><td><strong>High risk Overprivileged</strong></td><td>Number of principals in the highest tier</td></tr><tr><td><strong>Principals by Resource Type</strong></td><td><p>Number of principals grouped by the following categories:</p><ul><li>IAM Role</li><li>IAM User</li><li>IAM User Access Key</li><li>Secret</li></ul></td></tr><tr><td><strong>Principals by Tier</strong></td><td><p>Number of principals grouped by the following tiers:</p><ul><li><strong>Critical</strong></li><li><strong>High</strong></li><li><strong>Medium</strong></li><li><strong>Low</strong></li></ul><p>Each tier is calculated based on the <strong>Over Privilege</strong> percent, <strong>Risk Score</strong>, and <strong>Privilege Permissions</strong> percentage.</p></td></tr></tbody></table>

#### Table (Principals)

{% hint style="success" %}
You can hover over a row and click **Ignore** to hide principal that you do not consider a threat.
{% endhint %}

<table><thead><tr><th width="219.65625">Column</th><th>Description</th></tr></thead><tbody><tr><td><strong>Principal</strong></td><td>Name of the principal</td></tr><tr><td><strong>Account</strong></td><td>Account associated with the resource</td></tr><tr><td><strong>Risk Score</strong></td><td>Calculation based on the <strong>Principal Risk Level</strong> (maximum score of policy actions sensitivity) and the account risk level</td></tr><tr><td><strong>Identities</strong></td><td>Number of human and machine identities assigned to the resource</td></tr><tr><td><strong>Last used</strong></td><td>Number of days since an identity assigned to the resource used the permissions</td></tr><tr><td><strong>Over privilege</strong></td><td>Percentage of unused permissions for the principal</td></tr><tr><td><strong>Tiers</strong></td><td><p>Calculation based on the <strong>Over Privilege</strong> percent, <strong>Risk Score</strong>, and <strong>Privilege Permissions</strong> percentage.</p><p>Examples:</p><ul><li>If the <strong>Privileged Permissions percentage</strong> is over 60% and the <strong>Risk Score</strong> is greater than 4, the <strong>Tier</strong> will be <strong>Critical</strong>.</li><li>If the <strong>Privileged Permissions percentage</strong> is over 30%, the <strong>Over Privilege percentage</strong> is over 80%, and the <strong>Risk Score</strong> is greater than 4, the <strong>Tier</strong> will also be <strong>Critical</strong>.</li></ul></td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.apono.io/docs/getting-started/access-discovery/analyze-an-assessment.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.