Custom Email Notification Use Case
This section provides a comprehensive breakdown of the Custom Email Notification use case, specifically focusing on how to configure email alerts to notify a user's direct manager about incidents.
Configure Email Notifications to Notify the User’s Manager about Incidents
This use case outlines how to set up email notifications so that only the designated manager receives alerts about incidents caused by team members. This process improves communication and ensures managers are promptly informed of any issues affecting their team's compliance with company policies.
For instance, if an organization has DLP policies to prevent the sharing of sensitive data, and an employee violates this by emailing a sensitive document to a personal account, the configured email notification will automatically alert the employee's manager. This allows managers to address potential issues within their team and to take timely corrective actions.
To set up email alerts for respective managers regarding user incidents, complete the following steps:
Step 1: Configure Custom Attributes
- Verify if the manager email addresses are mapped to the users in Active Directory (AD). If not, collaborate with the AD team to configure the email address as a necessary step.
- Once the email address attribute is configured in AD, set up AD to extract this information and ingest it to Skyhigh through custom attribute integration. During ingestion, make sure the attribute contains a valid email address for the proper integration. It is recommended to map the email address using the manager's email ID instead of the short attribute. To configure custom attribute integration using AD or CSV, see Configure Custom Attributes
- After successful AD integration, the manager's email address will be displayed on the Policy Incident cloud card upon any policy violation.
Step 2: Create a Custom Email Template
To configure user email notifications for managers, you need to create a custom email template. For detailed instructions, see Create a Custom Email Template
If the custom attribute is enabled, you can view an option to Add Additional Recipient. Click this option to include the manager's email address, which was previously configured in the custom attributes, and save your email template configurations.
Step 3: Set Up Response Actions 
Once the custom email template is created, configure the DLP policy response action to execute manager notification emails. Select the Response Action to Quarantine or select the Custom Email Template, which includes the manager's email as a custom attribute. This ensures that when the DLP policy is triggered by an employee, their manager receives the incident notification.
