What are Stale Users?

How does Arnica classify inactive Identities as stale users?

By default, Arnica classifies an Identity or asset inactive after 90 days with no activity. These assets are then flagged as Stale within Arnica. For an asset to be considered stale, it must have conducted no activity at all. If the asset has shown activity, but has not acted in a way that utilizes it’s highest granted permissions, it will not be marked as stale, but may be flagged by one of the excessive permissions risks.

These include:

• Excessive Admin Permissions

• Excessive Maintainer Permissions

• Excessive CODEOWNERs Permissions

• Excessive Write Permissions

Read more on Permissions Risks here. Read more on Stale Identities here.