Retrieve identity attributes in Access Request Reviewer notification

According to the email template docs, most templates have a global variable called user that should provide access to identity attributes.