The Users tab shows who is generating the audit activity in the environment you are looking at.

Select Dashboard in the left navigation, then Users.

These are not your EaseLog users

This is the point people get wrong, so it is worth being clear.

This tab The Users & Roles page The people and services acting inside Dynamics 365, as recorded in the audit data. The people who can sign in to EaseLog itself.

Somebody can appear here without having an EaseLog account at all. That is normal, and it is the whole point: EaseLog is reporting on your Dynamics 365 users.

Active Users Today

A count of audited users active today, the share of total users that represents, and a trend line. The period selector is set to Weekly by default.

Figure 1. The Users tab showing Active Users Today and the Most Active Users ranking by operation volume.

Most Active Users

Users ranked by total operation volume, as a bar each.

Figure 2. The Most Active Users card in full, ranking audited Dataverse users by total operation volume.

Expect to see SYSTEM near the top

Many audit records are generated by Dynamics 365 itself and by connected services, not by people. SYSTEM and named application users routinely sit at or near the top of this list.

This is not a problem and it is not a misconfiguration. If you want to see human activity, read past those entries.

What to use it for

• Spotting a person or service generating far more activity than expected.
• Understanding which accounts are driving your storage growth.
• Starting an investigation. Note the name here, then go to the Log View, group or filter by Changed By, and read what they actually did. See Grouping Records.

Note

This tab covers the environment selected in the Environment picker at the top right. Switch environments there to compare.