DocumentationRelease Notes
Log In
Documentation

Email notifications

Email notifications are used to alert users on particular Password Safe actions, such as connection profile alerts, release requests, and password check failures.

Email notifications sent by Password Safe

The below table lists the email notifications that are sent to Password Safe users. It includes the event type that occurs to initiate the email notification and the account types that receive the email.

Local accounts (includes non-domain asset and database managed systems)

EventAccountNot configurableConfigurable by template settings
Release RequestManagedNA
  • Account's Approver
  • Requester (CC)
  • Asset's ISA
Request ResponseManagedNA
  • Account's Approver (CC)
  • Requester
  • Asset's ISA
Password Change FailureManaged
  • Managed System's ISA
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Functional
  • Managed System's ISA
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Password Check FailureManaged
  • Managed System's ISA
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Functional
  • Managed System's ISA
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Propagation Event FailureManaged
  • Managed System contact person (Managed Systems settings UI)
NA
Privileged Password ReleaseManaged
  • Managed Account Release Notification Recipients (Managed Accounts settings UI)
NA
Non-Managed Release ExpirationManaged
  • Managed Account Release Notification Recipients (Managed Accounts settings UI)
NA

Domain accounts

EventAccountNot configurableConfigurable by template settings
Release RequestManagedNA
  • Account's Approver
  • Requester (CC)
  • Domain Management permission (with Read/Write)
Request ResponseManagedNA
  • Account's Approver (CC)
  • Requester
  • Domain Management permission (with Read/Write)
Password Change FailureManaged
  • Domain Management permission (with Read/Write)
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Functional
  • Domain Management permission (with Read/Write)
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Password Check FailureManaged
  • Domain Management permission (with Read/Write)
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Functional
  • Domain Management permission (with Read/Write)
  • Built-in Administrators group members
  • Managed System contact person (Managed Systems settings UI)
NA
Propagation Event FailureManaged
  • Managed System contact person (Managed Systems settings UI)
NA
Privileged Password ReleaseManaged
  • Managed Account Release Notification Recipients (Managed Accounts settings UI)
NA
Non-Managed Release ExpirationManaged
  • Managed Account Release Notification Recipients (Managed Accounts settings UI)
NA

Customize mail templates

The subject line and message body for a template can be customized in Password Safe configuration.

  1. In the BeyondInsight console, go to Configuration > Privileged Access Management > Mail Templates.
  2. Select a mail template type from the list.
  3. Type the subject line text.
  4. In the Message Body field, add the text for the email:
    • Copy a tag from the Body Tags section to a location in the message body.
    • When working within cumulative alert emails, ensure you add any additional body tags within the elements.
    • To include hyperlinks that link directly to the approval and denial pages for a file or password request, use the :approvallink: and :denylink: message body tags.
  5. Click Save Template.

ℹ️

Note

Only one <ROW>/<ROW>/ tag can be added to the mail template. If you wish to add more tags, they must be added to the row already present within the template. For example:

<ROW>:AlertTimeUTC: | :AlertTimeClient: | :ComputerName: | :AccountName: | :AccountDomain: | :DNSName: | :IPAddress: | :EventCode: | :EventReferenceId: | :SubjectSID:<ROW>

©2003-2025 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.