Set security settings and quarantine
The settings are the policy; quarantine is what happens to things that fail it.
Security is how hard the front door is: sign-in, sessions and second factors, the quarantine, and the sign-in history kept against each account.
The settings that decide how hard the front door is.
The settings are the policy; quarantine is what happens to things that fail it.
HR can see the security state of an account — whether it is locked, whether a factor is set — without being exposed to credentials. That is what makes an offboarding check possible without handing HR the keys.
Sessions are the part people forget. Ending a session is what actually removes somebody who is already signed in.
Kept per account. It is the first thing to read when somebody reports something they did not do.
The capability list this guide is written against, unabridged. Nothing above adds to it.
Security on the Administration pageThe modules Security hands work to, or takes it from. Most problems that look like one module are a handover between two.