Group Auditors: Setup & Best Practices

What Is a Group Auditor?

Group Auditor (Read Only) is an administrator role for end-customers. It gives access to user reports and progress details, limited to a scope based on one or more of the following attributes: Group, Job title, Department, Location, Country, Company, or Manager.

For the full list of administrator roles, see Administrator Roles.

Setting the Scope

To create or edit a Group Auditor and define their scope:

Go to Settings > Administrators.
Select Add to create a new administrator, or select an existing one to edit.
Set the Role to Group Auditor.
Choose one or more attributes to define the scope: Group, Job title, Department, Location, Country, Company, or Manager.
Select Save (or Confirm).

Tip: Group Auditors can also be generated automatically from the Microsoft Entra ID integration, based on the 'manager' attribute — useful if you want auditor access to mirror your existing management hierarchy without manual setup.

Setting Up Automated Email Reports

Group Auditors can receive a monthly summary report by email, scoped to their assigned group.

Go to Settings > Administrators.
Create a new administrator or edit an existing Group Auditor.
Check Send Summary Report by email.
Select Save Settings.

The report is sent on the first day of every month and covers the previous month's actions, course completions and triggered simulations within the auditor's scope. It also includes a link to the Nimblr portal for further detail.

Important: The email report contains no personal data. Only a summary of user progress within the selected scope. The scope can only be selected for administrators with the Group Auditor role.

Best Practices

Keep scope attributes in sync with your directory. If a Group Auditor's scope relies on attributes like Department, Manager, or Job title, keep those fields accurate in Microsoft Entra ID or Google Workspace so the auditor's visibility stays correct as people move or change roles.
Use the Entra ID auto-generation for manager-based auditing. If you want line managers to automatically see their own team's progress, the Microsoft Entra ID integration can generate Group Auditors from the 'manager' attribute instead of setting each one up by hand.
Review auditor scopes after organizational changes. Reorgs, new managers, or department changes can leave a Group Auditor's scope out of date — check it whenever your structure changes.
Avoid overlapping scopes unless intentional. If more than one Group Auditor can see the same group, make sure that's a deliberate choice, so it's clear who owns oversight of each group.
Use the automated email report for recurring oversight. It's a lighter-weight way for a Group Auditor to stay on top of their group's progress than logging into the portal each month.

Need Additional Help?

If you're unsure about:

Setting up a Group Auditor or defining their scope
Automated email reports
Auto-generating Group Auditors from Microsoft Entra ID

Contact Customer Success:
customersuccess@nimblrsecurity.com

Or submit a ticket to our support team here.

Group Auditors: Setup & Best Practices

How to set up the Group Auditor role, define its scope, configure automated email reports, and best practices for keeping auditor access accurate.

What Is a Group Auditor?

Group Auditor (Read Only) is an administrator role for end-customers. It gives access to user reports and progress details, limited to a scope based on one or more of the following attributes: Group, Job title, Department, Location, Country, Company, or Manager.

For the full list of administrator roles, see Administrator Roles.

Setting the Scope

To create or edit a Group Auditor and define their scope:

Go to Settings > Administrators.

Select Add to create a new administrator, or select an existing one to edit.

Set the Role to Group Auditor.

Choose one or more attributes to define the scope: Group, Job title, Department, Location, Country, Company, or Manager.

Select Save (or Confirm).

Tip: Group Auditors can also be generated automatically from the Microsoft Entra ID integration, based on the 'manager' attribute — useful if you want auditor access to mirror your existing management hierarchy without manual setup.

Setting Up Automated Email Reports

Group Auditors can receive a monthly summary report by email, scoped to their assigned group.

Go to Settings > Administrators.

Create a new administrator or edit an existing Group Auditor.

Check Send Summary Report by email.

Select Save Settings.

The report is sent on the first day of every month and covers the previous month's actions, course completions and triggered simulations within the auditor's scope. It also includes a link to the Nimblr portal for further detail.

Important: The email report contains no personal data. Only a summary of user progress within the selected scope. The scope can only be selected for administrators with the Group Auditor role.

Best Practices

Keep scope attributes in sync with your directory. If a Group Auditor's scope relies on attributes like Department, Manager, or Job title, keep those fields accurate in Microsoft Entra ID or Google Workspace so the auditor's visibility stays correct as people move or change roles.

Use the Entra ID auto-generation for manager-based auditing. If you want line managers to automatically see their own team's progress, the Microsoft Entra ID integration can generate Group Auditors from the 'manager' attribute instead of setting each one up by hand.

Review auditor scopes after organizational changes. Reorgs, new managers, or department changes can leave a Group Auditor's scope out of date — check it whenever your structure changes.

Avoid overlapping scopes unless intentional. If more than one Group Auditor can see the same group, make sure that's a deliberate choice, so it's clear who owns oversight of each group.

Use the automated email report for recurring oversight. It's a lighter-weight way for a Group Auditor to stay on top of their group's progress than logging into the portal each month.

Need Additional Help?

If you're unsure about:

Setting up a Group Auditor or defining their scope

Automated email reports

Auto-generating Group Auditors from Microsoft Entra ID

Contact Customer Success:
customersuccess@nimblrsecurity.com

Or submit a ticket to our support team here.

Group Auditors: Setup & Best Practices

How to set up the Group Auditor role, define its scope, configure automated email reports, and best practices for keeping auditor access accurate.

What Is a Group Auditor?

Group Auditor (Read Only) is an administrator role for end-customers. It gives access to user reports and progress details, limited to a scope based on one or more of the following attributes: Group, Job title, Department, Location, Country, Company, or Manager.

For the full list of administrator roles, see Administrator Roles.

Setting the Scope

To create or edit a Group Auditor and define their scope:

Go to Settings > Administrators.

Select Add to create a new administrator, or select an existing one to edit.

Set the Role to Group Auditor.

Choose one or more attributes to define the scope: Group, Job title, Department, Location, Country, Company, or Manager.

Select Save (or Confirm).

Tip: Group Auditors can also be generated automatically from the Microsoft Entra ID integration, based on the 'manager' attribute — useful if you want auditor access to mirror your existing management hierarchy without manual setup.

Setting Up Automated Email Reports

Group Auditors can receive a monthly summary report by email, scoped to their assigned group.

Go to Settings > Administrators.

Create a new administrator or edit an existing Group Auditor.

Check Send Summary Report by email.

Select Save Settings.

The report is sent on the first day of every month and covers the previous month's actions, course completions and triggered simulations within the auditor's scope. It also includes a link to the Nimblr portal for further detail.

Important: The email report contains no personal data. Only a summary of user progress within the selected scope. The scope can only be selected for administrators with the Group Auditor role.

Best Practices

Keep scope attributes in sync with your directory. If a Group Auditor's scope relies on attributes like Department, Manager, or Job title, keep those fields accurate in Microsoft Entra ID or Google Workspace so the auditor's visibility stays correct as people move or change roles.

Use the Entra ID auto-generation for manager-based auditing. If you want line managers to automatically see their own team's progress, the Microsoft Entra ID integration can generate Group Auditors from the 'manager' attribute instead of setting each one up by hand.

Review auditor scopes after organizational changes. Reorgs, new managers, or department changes can leave a Group Auditor's scope out of date — check it whenever your structure changes.

Avoid overlapping scopes unless intentional. If more than one Group Auditor can see the same group, make sure that's a deliberate choice, so it's clear who owns oversight of each group.

Use the automated email report for recurring oversight. It's a lighter-weight way for a Group Auditor to stay on top of their group's progress than logging into the portal each month.

Need Additional Help?

If you're unsure about:

Setting up a Group Auditor or defining their scope

Automated email reports

Auto-generating Group Auditors from Microsoft Entra ID

Contact Customer Success:customersuccess@nimblrsecurity.com

Or submit a ticket to our support team here.

Contact Customer Success:
customersuccess@nimblrsecurity.com