The Enrich browser extension shows ControlUp device data and actions inside the other web apps you work in, such as ServiceNow and Microsoft Intune. When Enrich finds a device or user from your ControlUp environment on the page, you can open a slide-in overlay to view real-time data and fix issues without leaving your current tab. You can also search for any device from the extension toolbar.

From the Enrich overlay, you can:
- Take action: Run device actions, including custom scripts you've added to ControlUp, and end processes.
- Connect to the device: Start a Remote Control or Remote Shadow session, open a Remote Shell, or use the file browser and registry editor.
- Diagnose issues: View the top resource-consuming processes, network details (Wi-Fi signal strength, latency, and network usage), Windows Event Log entries, blue screen errors (BSODs), and application crashes.
- Monitor performance: View real-time and historical metrics such as CPU and RAM usage, and ControlUp Device Events such as alerts.
- Check hardware: View OS and hardware information and the device's storage drives.
Before you begin
- Enrich supports Microsoft Edge and Google Chrome only.
- Enrich works with all device types that ControlUp supports, including Windows, macOS, Linux, and thin clients.
- The actions you can perform in Enrich depend on your ControlUp account permissions, because Enrich uses your ControlUp sign-in.
- To configure Enrich settings for your organization, you need the Manage Sites permission in the Enrich permission category. This permission controls access to all Enrich settings, not only supported sites.
Install Enrich
Install the ControlUp Enrich extension from the Microsoft Edge Add-ons store or the Chrome Web Store.
If you want to deploy Enrich using a group policy, you can use these extension IDs and update URLs:
| Browser | Extension ID and update URL |
|---|---|
| Microsoft Edge | jpnanfoohdfeigkhpljklbgccfbccafp;https://edge.microsoft.com/extensionwebstorebase/v1/crx |
| Google Chrome | hbhejhbegnlejblphomgobfbjgobjkmf;https://clients2.google.com/service/update2/crx |
Sign in
If you're already signed in to ControlUp in your browser, Enrich signs you in automatically.
To sign in or out manually, click the Enrich icon in your browser toolbar. To sign out, click your profile icon, then click Sign out.
If your organization uses SAML, an admin can turn on Sign in with SAML SSO in the Enrich settings so that Enrich sends you straight to your SAML sign-in page.
Use Enrich
You can open Enrich in two ways: from a device that Enrich detects on a web page, or by searching for a device from the browser toolbar.
Open Enrich from a detected device
On supported sites, Enrich scans the page for devices and users from your ControlUp environment. When it finds a match, the Enrich icon appears on the right side of the page.
- Click the Enrich icon on the page to open the overlay.
- If Enrich found more than one device, use the dropdown at the top of the overlay to switch between them.
- Under the device name, Enrich shows how it detected the device (for example, by serial number).
Admins choose which sites Enrich scans and how it identifies devices. For details, see Configure Enrich.
Search for a device
You can search for any device in your ControlUp environment, whether or not it appears on the current page.
- Click the Enrich icon in your browser toolbar.
- On the Search tab, search by device name, serial number, UPN, or user display name. Search isn't case-sensitive.
- Select a device from the results to open the overlay.
Search doesn't work on internal browser pages, such as pages that start with chrome:// or edge://, or a blank start page that has no URL.
Click the external link icon next to a device's name to open that device's details page in ControlUp.

Use the extension toolbar
Click the Enrich icon in your browser toolbar to open the extension popup. The banner at the top shows which ControlUp organization you're connected to. The popup has three tabs:
| Tab | What it does |
|---|---|
| Search | Search for any device in your ControlUp environment. |
| Sites | Lists your organization's supported sites and their element IDs. The site you're viewing is highlighted in blue. |
| Sync | Shows when Enrich last synced with ControlUp. Click Sync now to get the latest devices and settings. |
To change the order of the tabs, click and drag them. Enrich saves the tab order separately for each user.
Configure Enrich
Admins can customize which sites Enrich scans, how it identifies devices, and how often it syncs. These settings apply to everyone in your organization.
If you don't turn on custom settings, Enrich uses its default configuration: it detects devices by device name and serial number only, on ServiceNow and Microsoft Intune (including endpoint.microsoft.com).
Turn on custom settings
- Sign in to ControlUp.
- Go to Settings > Enrich.
- Turn on Enable.

Settings reference
| Setting | Description |
|---|---|
| Refresh Interval | How often Enrich syncs your managed devices, supported sites, and other settings. Options: 1, 3, 12, or 24 hours. Default: 1 hour. |
| Sign in with SAML SSO | Sends users straight to your SAML sign-in page instead of the standard ControlUp sign-in page. |
| Device and User Detection Methods | How Enrich identifies devices and users on a page: device name, serial number, UPN, or user display name. Enrich matches a serial number only if it's longer than 4 characters. |
| Automatically log Enrich actions into ServiceNow work notes | When a user performs an action in Enrich (such as starting Remote Control or running a script) while viewing a ServiceNow incident, Enrich adds the action to the incident's work notes. When you start a remote control or remote shadow session, the work notes record the consent request message displayed to the user, and whether the user agreed or disagreed to the consent request. |
Add a supported site
ServiceNow and Microsoft Intune are included by default. To add another site:
- Click Add Site.
- Enter the site URL. You can use wildcards, for example
https://*.console.aws.amazon.com. - If the device identifiers on the site are inside iframes, turn on iframe Support.
- If you're not sure, add the site without iframe support first. Turn it on only if Enrich doesn't detect devices.
- (Optional) To search only specific parts of the page, limit the search to specific element IDs.
- Click Add site.
Limit the search to specific element IDs
By default, Enrich searches the entire page. On busy pages, this can match devices you don't care about. Limiting the search to specific elements reduces unwanted matches and lowers the extension's impact on the browser.
Enrich can target elements only if they have an id attribute, for example id="xyz". Other attributes, such as class or name, don't work.
To find and add an element ID:
-
Go to the site you're adding.
-
Right-click the element you want Enrich to search, and click Inspect.
-
Find the element's
idattribute.- If the element has no
idattribute, you can't use it to limit the search.

- If the element has no
-
In the site settings, turn on Limit search to specific element IDs.
-
Enter the ID and click Add. For the example above, enter
sys_display.incident.caller_id.- Repeat to add more IDs.
Element IDs for common apps
You can use these element IDs to narrow the search on common apps. These IDs can change when the app is updated.
| App | Element ID | Example |
|---|---|---|
| IGEL UMS | device-details-container-desktop |
![]() |
Troubleshooting
The Enrich icon doesn't appear on a page
- Check that the extension is on. Make sure Enrich is installed and enabled in your browser.
- Check that the site is supported. Open Enrich from your browser toolbar and go to the Sites tab. The current site should be highlighted in blue. If it isn't, check the site URL in your Enrich settings.
- Sync Enrich. If you recently added a device to ControlUp or added a supported site, go to the Sync tab and click Sync now.
- Check the element IDs. If the site uses Limit search to specific element IDs, go to the Sites tab and open Element IDs. A green ID means the element is on the page. It doesn't mean the element contains a matching device or user, so right-click the element and click Inspect to check its contents.
Enrich doesn't detect a device or user
Enrich needs an exact match on the page for one of your organization's detection methods.
- Serial number: Must be longer than 4 characters.
- UPN: Enrich compares against the
console_user_upnfield in the_devicesdata index. - User display name: Enrich compares against the
console_user_display_namefield in the_devicesdata index.
To see what ControlUp has collected for a device, check these fields in the _devices data index and compare them to what's on the page.
Enrich shows data from the wrong organization
Open Enrich from your browser toolbar and check the banner at the top. Make sure you're connected to the correct ControlUp organization.
An action is missing or unavailable
The actions you can perform in Enrich depend on your ControlUp account permissions. Contact your ControlUp admin to check your permissions.
