Inquiry about Setting Up an Email Notification for Account and Permission Aggregation Failures

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello,

I would like to set up an email notification to be sent to the manager if there is a failure when aggregating accounts and permissions from ISC’s sources. However, I was unable to find a suitable email template for this purpose.

Is there an email template or workflow that can facilitate this action?

Thank you.

2

Hi @joyoon00 You can use the WF to send the notifications.

  1. Use Account Aggregation Completed trigger to capture the aggregation results.
  2. Use the search query to get the permissions for the user
  3. Select Action as Get Identity to get the identity based on the source
  4. Finally you can select Send Email action to send the notifications.

This is the idea for how to achieve your usecase, give it a try and lmk if works for you.

Thanks,
Shantha Kumar

3

Hello Shantha

What trigger should I use in the workflow to execute this action?
Is it possible to identify aggregation failures in the search query?

Thanks

4

You can use the Account Aggregation Completed trigger and check if any source or specific source fails and proceed the next steps.

Use the status attribute to check the status of aggregation you can check Success, Failed, etc…

1 Like
5

I have identified that using Account Aggregation Completed works.
How can I get the owner identity from the source?

6

In the trigger you can’t get the source owner instead you can only get source ID, name. Anyway you can use the HTTP Operation to get the source owner using search query.

7

Hi @joyoon00,

Here is a sample WF you may want to try out:

AggregationCompleted20241122.json (1.8 KB)

1 Like
8

Would you want to send the email to any manager or an admin?

1 Like
9

Hi @joyoon00
Other than source health or a subscription on a search query I don’t think there is anything as standard. However my workflow below will send an email (to a fixed address) when an error is detected, the email will contain the error and source name.

Try this
aggregation_error_notification.json (5.1 KB)

Hope this helps.

1 Like
10

Hi @joyoon00
Did this help you at all?