The Surface console
A map of the Surface console, what each page answers, and the shortcuts that work everywhere.
The console is organized by the question you are asking. The left menu has four sections, with Hub and Downloads at the bottom.
| Menu section | Page | Question it answers |
|---|---|---|
| Overview | Insights | How are we doing overall? |
| Inventory | What AI assets do we have, and how are they connected? | |
| Policies | Asset Access | Which assets do we allow, warn about, or block? |
| Asset Policies | What policies are installed assets checked against? | |
| Session Policies | What policies are AI conversations checked against? | |
| Activity | Sessions | How is AI being used? See Sessions |
| Audit Log | Who changed what? See Audit Log | |
| Requests | Who is asking for access to an asset? | |
| Environment | Endpoints | Which endpoints have what? |
| Users | Who can use the console? See Users | |
| Footer | Hub | Which extensions are on? See Hub |
| Downloads | Installers and enrollment tokens. See Enrollment tokens |
Shortcuts
| Keys | Action |
|---|---|
⌘K or Ctrl+K |
Command palette |
/ |
Focus the search box |
F |
Open filters |
G then I, V, A |
Go to Insights, Inventory (list view), Inventory (graph view) |
G then C, P, S |
Go to Asset Access, Asset Policies, Session Policies |
G then N, L, Q |
Go to Sessions, Audit Log, Requests |
G then E, U, H, D |
Go to Endpoints, Users, Hub, Downloads |
C then O, A, W, B |
Open the Open, Allowed, Warned, or Blocked tab of Asset Access |
A, then A, W, B |
Take Action on the open asset, then Allow, Warn, or Block it |
Hold ⌘ or Ctrl to see each page’s shortcut beside it in the left menu.
The console updates itself when a scan completes, an action is applied, or new sessions arrive. You never need to refresh.
What Members see
People with the Member role only see their own endpoint. Opening the console takes them straight to it. Everything below describes what Admins and Auditors see.