Identity Management, Tools, Cerebro Overview

What information is available in Cerebro and how do I interpret it?

Cerebro can be accessed here. Any campus network or VPN can access Cerebro; it is in the fully closed firewall group.

General Information

  • This section includes the user's name and UIN.
  • You should not provide someone their UIN - they can use the Find your UIN tool.
    •  If they have issues with the form, you can provide their UIN after verifying some of their info (have them tell you their NetID, department/major, etc.)

Central Registry

  • Illinois Email Delivery - this field shows where the relays are set to send their mail.
    • @mx.uillinois.edu goes to their Exchange inbox, and @g.illinois.edu goes to their Google Apps account. 
    • This can also be set to a personal email. If they have an Exchange inbox and want to send their mail to a personal address or Google Apps account, they also need to set up a forwarding rule in Exchange. See Office 365, Email, Exchange, Forwarding Exchange Email to Another Account.
  • Type
    • This field indicates what types the account has. Every person should have person and phone.
    • They may also have student, staff, extra help, degree, etc. This determines several things, such as if their account is enabled and their access to certain applications/services.
  • Role
    • Similar to type, this provides more information on students and affiliates. It shows terms for which students are/have been registered, along with degree recipient dates. Staff roles are coming soon.

Password Recovery Options

  • Shows what password recovery options they have set up for self-service password recovery. They can use them at the NetID Center. The information is truncated for privacy.

Enterprise ID Assignments

  • Shows the user's Enterprise ID (EID) and all NetIDs they have across all 3 campuses. For instructions on merging multiple NetIDs and/or EIDs, see NetID Change, Merging multiple NetIDs

Skype for Business

Google Apps @ Illinois

Office 365

  • Shows whether the user is enabled to use O365 apps. This does NOT indicate if they have an Exchange account (see below).

U of I Box

Active Directory (AD)

  • Account status
    • Enabled or disabled. If they are disabled, they do not have a current affiliation with the university. This is tied to type (i.e. student, staff, special, allied all make an account enabled).
  • Password locked
    • Their password is temporarily locked due to too many incorrect attempts. Can be unlocked using the AD Tool.
    • Sometimes a device can hold onto an old/bad password and cause recurring lockouts. Ensure their password is up-to-date in all of their devices and programs to avoid this. 
      • If you can't solve it, contact the Help Desk for help identifying the device causing the lockout. See [Link for document 48098 is unavailable at this time.] for more information.
  • Password last set
    • Helpful for making sure that their password is not expired. 
  • Duo enrolled
    • Indicates if they are enrolled in 2-factor authentication

Exchange Online (Office 365)

  • If this section is not blank, the user has an Exchange account
  • Do not trust the following fields - they are not known to be accurate:
    • When created
    • Last logon
    • Last logoff
  • It also shows any inbox rules they have set up, which can be helpful for troubleshooting
    • They may have certain things sent to a folder or deleted, so can be useful to see where items might end up.




Keywords:how to use cerebro fields description data information info   Doc ID:98155
Owner:Sarah F.Group:University of Illinois Technology Services
Created:2020-02-20 19:31 CDTUpdated:2021-09-08 14:55 CDT
Sites:University of Illinois Technology Services
Feedback:  1   0