---
schema_version: "1"
id: 961def3be944ff97361b549845c2e9930f9c6c9d0352126cd1fcae5a3727725a
title: Make the Threat Detection App Visible to Users
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/real_time_em_td_ui_enable_app.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.real_time_em_td_ui_enable_app.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1a3c63aee6d6817ac37d59ea0e907d3faceb0c73b6a736eb1fbbeed982da54ef
description: Before you can view the Threat Detection events in Salesforce and provide feedback, you must make the app visible to users. You also specify which of the tabs are visible to different user profiles.
products:
  - Salesforce Platform
  - Cross Cloud
release: "264"
---
# Make the Threat Detection App Visible to Users

Before you can view the Threat Detection events in Salesforce and provide feedback, you must make the app visible to users. You also specify which of the tabs are visible to different user profiles.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition">
        <colgroup>
          <col>
        </colgroup>
        <tbody>
          <tr class="">
            <td class="slds-cell-wrap" style="vertical-align:top;">Available in both Salesforce Classic (not available in all orgs) and Lightning
              Experience.</td>

          </tr>
          <tr class="">
            <td class="slds-cell-wrap" style="vertical-align:top;">
              <p>Available in: <strong>Enterprise</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong>
                Editions</p>
              <p style="margin-bottom:0;">Requires Salesforce Shield or Salesforce Event Monitoring add-on
                subscriptions.</p>
            </td>

          </tr>
        </tbody>
      </table>

 
| User Permissions Needed |   |
| --- | --- |
| To view the Threat Detection events: | View Threat Detection Events |

Use Event Manager to enable streaming and storage for the Threat Detection events: ReportAnomalyEvent, SessionHijackingEvent, GuestUserAnomalyEvent, LoginAnomalyEvent and CredentialStuffingEvent.

1. Create a permission set that’s associated with the Salesforce license.
2. Edit the System Permissions page of your permission set and enable the **View Threat Detection Events** permission.
3. Assign the permission set to the user who administers the Threat Detection app.
    
    Salesforce recommends that you create a profile specifically for security administrators who are responsible for managing threat detections. For example, create a profile called Threat Detection Administrator. Then assign the permission set to a user with the Threat Detection Administrator profile.
4. Edit the Tab Settings of each user profile that uses the Threat Detection app and specify the visibility of the tabs. The tabs are named Report Anomaly Event Store, Session Hijacking Event Store, Credential Stuffing Event Store, and Threat Detection Feedback.
    
    For example, system administrators usually access everything in the UI, so set the visibility of all tabs to Default On for the System Administrator profile. If you created a Threat Detection Administrator profile, set the same visibility. If you don’t want standard users to view feedback, set the visibility of Threat Detection Feedback for the Standard User profile to Tab Hidden.
5. From Setup, in the Quick Find box, enter App Manager.
6. Edit the Threat Detection app by selecting **Edit** in the dropdown to the right of the app.
    
    ![Lightning Experience App Manager with Threat Detection app highlighted](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/setup/images/rtem_td_ui_leap.png)
7. In the Assign to Profiles section, select the profiles for which the Threat Detection app is visible.
    
    ![Assign to Profiles section of the Threat Detection app in the App Manager, with System Administrator, Threat Detection Administrator, and Standard User selected in the Visibility column.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/setup/images/rtem_td_ui_leap_assign_profiles.png)
8. Save your changes.

The Threat Detection app is now visible to selected users.

#### See Also

- [_Salesforce Help_: Monitor Streaming Events with Event Manager](https://help.salesforce.com/articleView?id=event_monitoring_monitor_events_with_event_manager.htm&language=en_US)
- [_Salesforce Help_: Permission Sets](https://help.salesforce.com/articleView?id=perm_sets_overview.htm&language=en_US)
- [_Salesforce Help_: App and System Settings in Permission Sets](https://help.salesforce.com/articleView?id=perm_sets_about_app_and_system.htm&language=en_US)
- [_Salesforce Help_: View and Edit Tab Settings in Permission Sets and Profiles](https://help.salesforce.com/articleView?id=users_tab_visibility.htm&language=en_US)