Email notification when a DL is deleted from the DLrequest portal
There was an issue raised by user for group deletion, No body knew who or when the a particular group got deleted from Domain. This group was an Security group used for critical access. The user just created new group from DLrequest SS portal and asked us to investigate about the deletion.
checking the logs in depth we found that the group was deleted by the service account "svcgroupid" on 04/19/2022 10:56:05 AM. This implies that for some reason the group was deleted from the DLrequest end.
Now the concern we discussed here is that it is still unknown how the group got deleted from DLrequest end and since the group is created again (did not restore old group) we have a dead end on finding the actual reason.
This could have been taken care well in time if the DLrequest had the ability to send email notification to the owner and co-owners, about the group deletion.
We verified that this email notification is not happening when the DL is being deleted from the DLrequest portal hence we are asking whether we can add this as a feature so that whenever a group is deleted from DL request end it will inform the owner, co-owners and members and we can understand if this was valid deletion or not and whether that will cause any critical situation like we faced.
Can this be achieved in next upcoming updates? Our org user are concern for this as there were many instance where a critical access group was deleted by someone using DLrequest portal and nobody is aware who did it and why until we restore it from AD and then find the history on DLrequest portal. Today itself same incident happened and this deletion notification is being demanded by the users. We can find who deleted until we restore the group from AD, but if the user go ahead and created new group and asks for RCA we do not even have the opportunity to check history and find out who deleted because the group is new. Let me know how can this be taken forward. Thanks.
Support team suggest use 2 different setting
------------------------------------------------------------------
to be notified if the Group gets deleted or any other modifications take place on an object, you can use the following option:
Identity Store > Identity Store Name > Properties > Configurations > Notifications > Check Notify Object Being Modified
In the To and CC box, add the email addresses of the people who need to be notified for any changes. This option ensures that any object being modified sends out an email notification to the email address(es) mentioned in To and CC. (which will also include the Delete event as well)
------------------------------------------------------------------
------------------------------------------------------------------
The Group Deletion has to go through an approval process first in order to be actually deleted from the Directory. We can use Workflows for this matter.
- Go to Identity Stores > (Identity Store Name) > Properties > Workflow
- Click on Add and this will let you create a new workflow.
- In the next window that appears, fill the following fields:
- Name (for the workflow)
- Description (for future reference)
- Object(s) - Group
- Events - Delete
- Keep the "Enable Mail Approval" and "Enable Approver Acceleration" boxes checked
- Approvers - Click Add and select "Owner and Additional Owner of the Group"
- Once that is done, your Workflow is created.
------------------------------------------------------------------
Both the above suggestions are not feasible, we just need Deletion email notification to the owners and additional owners.
-
Hello Kirti,
Thank you for taking the time to submit this valuable feedback and it will be an excellent addition to the product. This has been conveyed to the product team. Below is the feature request number of this request:-
Feature: 39095, Community Channel [Feature Request] - Email notification when a DL is deleted from the DL request portalPlease keep the suggestions/feedback coming.
Please sign in to leave a comment.
Comments
2 comments