> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt.

# User Reports


Enterprise Edition

**Audit reports** require JumpServer Enterprise Edition. Raw session and log evidence remains available according to your deployment configuration.

[Request 14-day free trial](https://www.jumpserver.com/free-trial)

**User Reports** analyzes how users sign in to JumpServer and how their passwords change over time. The report is chart-first: choose a report type, set the time range, and read the overview counters, charts, and ranking tables.

Open the page from **Audits > Report > User Reports**.

## Report types

The left panel lists the available reports for this category:

- **User login report** — overview of the user base and sign-in activity, with success and failure trends, login sources, visit-time distribution, and login methods.
- **User change password report** — password change totals, a change trend, and rankings of target users and operating users.

## Prerequisites

- A valid enterprise license. Without a license, the Report area is not available.
- An audit role with the `rbac.view_userloginreport` or `rbac.view_userchangepasswordreport` permission.

## Read the user login report


1

Select **User login report** in the left panel.

2

Choose **Today**, **Last 7 days**, or **Last 30 days**.

3

Review the **Overview** counters: total users, MFA not enabled, first login, valid, face vector, and need to update password.

4

Read the charts: user login trend (success and failure), login source, visit time distribution, and login method statistics.

![Figure 1: User login report with overview counters and login charts.](/images/v5/jumpserver/v5_admin_report_01.png)

## Read the user change password report

Select **User change password report** and review the **Overview** counters for total changes, target users, and operators. The **User modification trends** chart shows password changes over time, and the ranking tables list the most frequently modified users and the most active operators.

## Field reference

| Section         | Metric                         | Description                                                |
| --------------- | ------------------------------ | ---------------------------------------------------------- |
| Overview        | Total                          | Total users in scope.                                      |
| Overview        | MFA not enabled                | Users without an MFA method configured.                    |
| Overview        | First login                    | Users who signed in for the first time in the range.       |
| Overview        | Valid                          | Users whose accounts are valid.                            |
| Overview        | Face vector                    | Users with facial recognition data enrolled.               |
| Overview        | Need to update password        | Users flagged to change their password.                    |
| Charts          | User login trend               | Successful and failed sign-ins over time.                  |
| Charts          | Login source                   | Distribution of users by authentication source.            |
| Charts          | Visit time distribution        | Sign-ins grouped into four six-hour periods.               |
| Charts          | Login method statistics        | Sign-in volume by authentication method.                   |
| Change password | Total / Target user / Operator | Number of changes, affected users, and distinct operators. |
| Rankings        | Modify the target user ranking | Users whose passwords were changed most often.             |
| Rankings        | Ranking of operating users     | Users or administrators who changed passwords most often.  |

## Notes


Note

**Customize** controls which charts and tables the report displays, while the range switch controls the reporting period. Compare like-for-like periods when you investigate a change in sign-in volume.

## Related topics

- [Login Logs](https://www.jumpserver.com/docs/features/audits/activities/login-logs.md)
- [Password Change Logs](https://www.jumpserver.com/docs/features/audits/activities/password-change-logs.md)