A Falcon Administrator has the ability to modify specific details within an existing user's account via the User Management page in the Falcon console. The administrator can directly edit the user's First name and Last name. They can also modify the user's permissions by changing their assigned roles. The term Working groups is interpreted as User Groups or Falcon Roles, which are fundamental to access control and are editable by an administrator. The user's email address, however, serves as their unique identifier and cannot be changed after the account has been created.

B. Phone number: This is not a standard, administrator-editable field in a user's primary profile; it is typically associated with the user's self-managed multi-factor authentication (MFA) settings.

C. Email address: The email address functions as the unique username for the account and is immutable. To change it, the existing user account must be deleted and a new one created.

1. CrowdStrike Falcon® Documentation

User Management

"Edit a user" section.

Reference: "You can edit a user's first name

last name

and assigned Falcon roles. You can't edit a user's email address. To change a user's email address

you must delete their user account and create a new one." This directly supports that the first/last name (A) and roles/groups (D) are editable

while the email address (C) is not. The documentation does not list a phone number (B) as an admin-editable field. (Accessed via the Falcon Console Help section).

2. CrowdStrike

Falcon Platform for Administrators (FALC 201) Courseware

Module: "User Management and Roles".

Reference: The course material demonstrates the "Edit User" dialog box within the Falcon UI. The visible and editable fields in this demonstration include "First name

" "Last name

" and the list of "Falcon roles" that can be assigned or removed. The "Email" field is shown as greyed-out and non-editable. This visual evidence from the official training confirms the correct and incorrect options.