# Risk Management Report Command

### Risk Management Command

This command/function helps to Generate risk management reports from Keeper's Risk Management Dashboard (RMD) APIs.

<details>

<summary>DotNet CLI</summary>

**coming soon**

</details>

<details>

<summary>DotNet SDK</summary>

Comming Soon

</details>

<details>

<summary>PowerCommander</summary>

**Command:** `Get-KeeperRiskManagementReport`

**Alias:** `risk-report`

**Parameters**

<table><thead><tr><th width="167.1666259765625">Parameter</th><th width="167.3333740234375">Default</th><th>Description</th></tr></thead><tbody><tr><td><code>-Action</code></td><td><code>enterprise-stat</code></td><td>The report action to perform. See Actions below.</td></tr><tr><td><code>-AuditEventType</code></td><td>—</td><td>Audit event type name (e.g. <code>"bw_record_high_risk"</code>) or numeric ID. Required for <code>security-alerts-detail</code>. Use <code>security-alerts-summary</code> to discover available event types.</td></tr><tr><td><code>-BenchmarkFields</code></td><td>—</td><td>Benchmark fields to set, specified as <code>NAME:STATUS</code> pairs. Required for <code>security-benchmarks-set</code>.</td></tr><tr><td><code>-Format</code></td><td><code>table</code></td><td>Output format: <code>table</code>, <code>json</code>, or <code>csv</code>.</td></tr><tr><td><code>-Output</code></td><td>—</td><td>File path to write the report output to. When omitted, output is displayed in the console.</td></tr><tr><td><code>-SyntaxHelp</code></td><td>—</td><td>Display detailed syntax help text with all available options and examples.</td></tr></tbody></table>

**Actions**

<table><thead><tr><th width="242.16668701171875">Action</th><th>Description</th></tr></thead><tbody><tr><td><code>enterprise-stat</code></td><td>Enterprise-wide summary showing the number of users who recently logged in and the number of users with records. This is the default action.</td></tr><tr><td><code>enterprise-stat-details</code></td><td>Per-user breakdown showing each user's last login timestamp and whether they have records in their vault.</td></tr><tr><td><code>security-alerts-summary</code></td><td>Summary of security alert events over the current and previous 30-day periods, including event occurrence counts, unique user counts, and trend indicators.</td></tr><tr><td><code>security-alerts-detail</code></td><td>Detailed per-user breakdown for a specific audit event type. Requires the <code>-AuditEventType</code> parameter. Shows each user's current and previous occurrence counts and the last occurrence timestamp.</td></tr><tr><td><code>security-benchmarks-get</code></td><td>Retrieves the current status of all enterprise security benchmarks, including their status (<code>RESOLVED</code>, <code>IGNORED</code>, or <code>UNRESOLVED</code>), last updated timestamp, and auto-resolve setting.</td></tr><tr><td><code>security-benchmarks-set</code></td><td>Updates the status of one or more security benchmarks. Requires the <code>-BenchmarkFields</code> parameter with <code>NAME:STATUS</code> pairs.</td></tr></tbody></table>

**Security Benchmark Names**

The following benchmark names are valid for `security-benchmarks-get` and `security-benchmarks-set`:

| Benchmark Name                                      | Description                                          |
| --------------------------------------------------- | ---------------------------------------------------- |
| `SB_DEPLOY_ACROSS_ENTIRE_ORGANIZATION`              | Deploy Keeper across the entire organization         |
| `SB_ENFORCE_STRONG_MASTER_PASSWORD`                 | Enforce strong master password policy                |
| `SB_PREVENT_INSTALLATION_OF_UNTRUSTED_EXTENSIONS`   | Prevent installation of untrusted browser extensions |
| `SB_ENSURE_TWO_FACTOR_AUTHENTICATION_FOR_END_USERS` | Ensure two-factor authentication for end users       |
| `SB_ENABLE_ACCOUNT_TRANSFER_POLICY`                 | Enable account transfer policy                       |
| `SB_CONFIGURE_IP_ALLOWLISTING`                      | Configure IP allowlisting                            |
| `SB_REDUCE_ADMINISTRATOR_PRIVILEGE`                 | Reduce administrator privilege                       |
| `SB_CREATE_ALERTS`                                  | Create security alerts                               |
| `SB_ENSURE_OUTSIDE_SSO_ADMINISTRATOR_EXISTS`        | Ensure an outside-SSO administrator exists           |
| `SB_DISABLE_BROWSER_PASSWORD_MANAGERS`              | Disable browser password managers                    |
| `SB_LOCK_DOWN_SSO_PROVIDER`                         | Lock down SSO provider                               |
| `SB_DISABLE_ACCOUNT_RECOVERY`                       | Disable account recovery                             |
| `SB_CREATE_AT_LEAST_TWO_KEEPER_ADMINISTRATORS`      | Create at least two Keeper administrators            |
| `SB_ENFORCE_LEAST_PRIVILEGE_POLICY`                 | Enforce least privilege policy                       |
| `SB_ENSURE_TWO_FACTOR_AUTHENTICATION_ADMIN_USERS`   | Ensure two-factor authentication for admin users     |

Valid benchmark statuses: `RESOLVED`, `IGNORED`, `UNRESOLVED`

**Examples:**

{% code overflow="wrap" %}

```powershell
PS >  Get-KeeperRiskManagementReport

Users Enterprise Stat

Metric             Value
------             -----
Logged In (Recent)    11
Has Records           15


PS > Get-KeeperRiskManagementReport -Action enterprise-stat-details

Enterprise Stat Details

Username                               LastLoggedIn        HasRecords
--------                               ------------        ----------
test1@example.com                    2026-03-27 16:50:49       True
test2@example.com                    2026-04-17 10:16:56       True
test3@example.com                    2026-04-16 15:58:02       True

```

{% endcode %}

</details>

<details>

<summary>Python CLI</summary>

Comming Soon

</details>

<details>

<summary>Python SDK</summary>

Comming Soon

</details>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/keeperpam/commander-sdk/keeper-commander-sdks/sdk-command-reference/reporting-commands/risk-management-report-command.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.