Source: https://atomic-works-test.docs-staging.pageloop.ai/data-library/access/dashboard-actions/identify-and-map-users-in-a-critical-system

# Identify And Map Users In A Critical System

---
description: >-
  Identify and map users in critical systems by linking accounts to staff
  records, classifying non-staff accounts, and managing unidentified users.
---

# Identify and map users in a critical system

Use Sprinto to identify and map accounts discovered in critical systems to the appropriate employee or contractor records. This helps maintain accurate access inventories, improves access reviews, and ensures user accounts are correctly classified for audit and compliance purposes.

### Before you begin

* Ensure the critical system has been added to Sprinto.
* You must have permission to manage access records within the critical system.
* User accounts must be synced or imported into the selected critical system.

### Identify and map a user

1. Log in to the Sprinto dashboard.
2. Navigate to **Data Library > Access**.
3. Select the **System accounts** tab.

<figure><img src="../../../.gitbook/assets/Screenshot 2026-06-17 at 12.27.02.png" alt="" width="563"><figcaption></figcaption></figure>

4. Open the critical system where you want to identify or map users.
5. Select the **Users** tab.
6. Locate the user account you want to classify.
7. Click the **Edit** icon next to the user record.

<figure><img src="../../../.gitbook/assets/Screenshot 2026-06-01 at 15.28.29.png" alt="" width="563"><figcaption></figcaption></figure>

8. In the **Identify & map user** dialog, select one of the following options from the **User is** dropdown:
   * **Existing staff in Sprinto** – Map the account to an employee or contractor that already exists in Sprinto.
   * **New staff in Sprinto** – Map the account to an employee or contractor who has not yet been added to Sprinto.
   * **Not a staff account** – Mark the account as a shared, service, system, or non-human account.
   * **Not identified** – Mark the account as unidentified when ownership cannot be determined.
9. Enter the employee or contractor details.
10. Click **Save**.

<figure><img src="../../../.gitbook/assets/Screenshot 2026-06-01 at 15.30.25.png" alt="" width="375"><figcaption></figcaption></figure>

The selected classification is applied to the user account and displayed in the Users table.

### Classification options

<table><thead><tr><th width="205.42578125">Option</th><th>Description</th></tr></thead><tbody><tr><td>Existing staff in Sprinto</td><td>Links the account to an existing employee or contractor record in Sprinto.</td></tr><tr><td>New staff in Sprinto</td><td>Associates the account with a staff member who has not yet been added to Sprinto.</td></tr><tr><td>Not a staff account</td><td>Identifies shared mailboxes, service accounts, support accounts, automation accounts, or other non-human accounts.</td></tr><tr><td>Not identified</td><td>Flags accounts whose ownership cannot currently be verified.</td></tr></tbody></table>

### What happens after mapping?

Once a user is classified:

* The account ownership information is updated in Sprinto.
* Access reviews use the mapped user information during review cycles.
* Non-staff accounts are clearly identified and separated from employee accounts.
* Unidentified accounts remain visible for further investigation and remediation.
* Audit evidence reflects the latest user classification information.