Non-Human Identity Risk Shared Email Template

This email is sent to a recipient (identified by email address) when an administrator shares a non-human identity security risk with them.

Note

CC and BCC are intentionally not supported for this template, because the notification can contain details of an exposed secret.

Name: Non-Human Identity Risk Shared

Subject: A security risk was shared with you: $!{riskName}

Body:

Dear $__recipient.name,<br/><br/>
An administrator shared a security risk with you in ${__global.productName}.<br/><br/>
Risk: $!risk.name<br/>
#if($risk.severity)Severity: $risk.severity<br/>#end
#if($risk.status)Status: $risk.status<br/>#end
#if($risk.owner)Owner: $risk.owner<br/>#end
#if($risk.secretType)Secret type: $risk.secretType<br/>#end
#if($risk.validation)Validation: $risk.validation<br/>#end
#if($risk.account.name)Account: $risk.account.name#if($risk.account.environment) ($risk.account.environment)#end<br/>#end
#if($risk.discoveredAt)Discovered: $risk.discoveredAt<br/>#end
Risk ID: $!risk.guid<br/><br/>
#set($url = "${__global.productUrl}/ui/e/risk-center/$!risk.guid")
To review this risk, go to it in the Risk Center <a href="$url" target="_blank">here</a>, or copy and paste this link into your browser: $url<br/>
<br/>Thanks,<br/> The $__global.productName Team<br/>

Attributes

This email template uses version 2 global variables and the following template-specific attributes:

Name	Type	Description
riskName	String	Display name of the non-human identity risk being shared.
severity	String	Risk severity (CRITICAL, HIGH, MEDIUM, LOW, UNKNOWN); drives the severity badge color.
status	String	Current risk status.
validation	String	Live validation state of the exposed secret.
riskOwner	String	Identity or team accountable for the risk.
environment	String	Environment the risk was found in.
secretType	String	Type and origin of the exposed secret.
discoveryTime	String	When the risk was discovered, pre-formatted for display.
accountId	String	Identifier of the account the risk belongs to.
riskId	String	Entro unique identifier (GUID) for the risk.
secretSnippet	String	Redacted fragment of the exposed secret. Optional; the section is omitted when absent.
comment	String	Free-text note written by the administrator sharing the risk. Optional.
sharedBy	String	Display name of the administrator who shared the risk. Optional; falls back to 'An administrator'.
reviewUrl	String	Deep link to the risk. Passed in full by the caller rather than built in the template, because the console host differs per surface.
exposureUrl	String	Deep link to the underlying exposure. Optional; the second button is omitted when absent.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.