With the sequential updates, the term "Member" in the screen has been changed to "User". If you still see "Member" in the help documentation, please read it as "User" as appropriate. For more details on the background, please check this announcement.
Overview
This page describes the types of alerts provided by Josys.
Target Audience
IT administrators with Josys Super Admin privileges.
*The Alert Settings menu is only visible to users with Super Admin privileges.
Default Alert Settings List
| Setting Item | Frequency | Severity |
|---|---|---|
| Privileged access accounts without MFA configured | Daily | Critical |
| MFA disabled by user | Daily | Critical |
| App integration synchronization error | Daily | Critical |
| Offboarded employees with unremoved apps | Daily | Critical |
| Unapproved app usage detected | Daily | High |
| New unmanaged user | Daily | High |
| IT devices past disposal/termination date | Daily | High |
| Apps past renewal date | Daily | High |
| New application detected | Daily | Medium |
| Privileged access granted to unmanaged users | Daily | Medium |
| Licenses assigned to unmanaged users | Daily | Medium |
| Apps approaching renewal date | Weekly | Medium |
| Employees with no apps assigned | Weekly | Medium |
| IT devices approaching disposal/termination date | Weekly | Medium |
Alert Details List
The various alerts that can be configured in Josys, along with their detection conditions and default values, are as follows. These alerts help in the early detection of potential issues and security risks in IT asset management.
Alert: Privileged access accounts without MFA configured
Configurable Condition: App Name
Details: If any user holding a privileged access account for the selected app has not configured MFA, this alert will be sent to the specified notification destination.
Action: Prompt the users who have not set up MFA to configure it.
(Reference) Check apps with SSO and MFA configured
Alert: MFA disabled by user
Configurable Conditions: App Name, User Status, Account Status
Details: This alert is sent to the specified notification destination when a user changes their MFA status from enabled to disabled.
Example) If configured as shown in the screenshot, the alert will be sent to the specified notification destination when "a user whose status is Active or On Leave, and who is using an account for the target app (Google Workspace in this example), disables MFA."
Action: Prompt the users who have not set up MFA to configure it.
(Reference) Check apps with SSO and MFA configured
Alert: App integration synchronization error
Configurable Condition: None (applies to all apps)
Details: Alerts are sent for all apps in the Apps list.
Action: Disconnect the integration once, and then try integrating again.
Alert: Offboarded employees with unremoved apps
Configurable Condition: App Name
Details: If an offboarded employee still holds an account for the selected app, this alert will be sent to the specified notification destination.
Action: (Reference) Unremoved IT devices or apps exist for offboarded users
Alert: Unapproved app usage detected
Configurable Conditions: App Category, App Risk Level, Detection Source
Details: This alert is sent to the specified notification destination when app usage is detected even though the status in the detected apps list is set to "Rejected".
Example) If configured as shown in the screenshot,
"Among apps already rejected from the 'Detected Apps' list,
if an app with an App Category of 'Education' or 'Knowledge Management' and an App Risk Level of Low to High/Unknown
is detected by any of the selected sources,"
the alert will be sent to the specified notification destination.
Action: Email notification feature to detected accounts
Alert: New unmanaged user
Configurable Condition: App Name
Details: When a new unmanaged user is detected in the selected app, this alert is sent to the specified notification destination.
Action: Detect and handle unmanaged users
Alert: IT devices past disposal/termination date
Configurable Condition: None
Details: Alerts are sent for all IT devices in the Devices list whose disposal/termination date has passed.
Action: Dispose of or terminate the device, and edit the device information.
(Reference) Edit device information
Alert: Apps past renewal date
Configurable Condition: None
Details: Alerts are sent for apps in the Apps list where Josys detects that the renewal date has passed.
Action: Edit the app information and update it to the latest renewal date.
Alert: New application detected
Configurable Conditions: App Category, App Risk Level, Detection Source
Details: This alert is sent to the specified notification destination when a new app is added to the detected apps list.
Example) If configured as shown in the screenshot, "Among apps whose usage is detected for the first time, if an app with an App Category of 'Education' or 'Knowledge Management' and an App Risk Level of Low to High/Unknown is detected by any of the selected sources," the alert will be sent to the specified notification destination.
Action: Access the detected apps list and update the status to Approved, Rejected, etc.
Alert: Privileged access granted to unmanaged users
Configurable Condition: App Name
Details: When it is detected that an unmanaged user holds privileged access in the selected app, this alert is sent to the specified notification destination.
Action: Register the target account in the User Profiles.
(Reference) Register users / Detect and handle unmanaged users
Alert: Licenses assigned to unmanaged users
Configurable Condition: App Name
Details: When it is detected that a license is assigned to an unmanaged user in the selected app, this alert is sent to the specified notification destination.
Action: Register the target account in the User Profiles.
(Reference) Register users / Detect and handle unmanaged users
Alert: Apps approaching renewal date
Configurable Condition: Number of days until the next renewal date
Details: When the number of days falls below the configured "days until the next renewal date," this alert is sent to the specified notification destination.
Action: Once the contract is renewed, edit the app information and enter the new renewal date.
Alert: Employees with no apps assigned
Configurable Condition: None
Details: When a user with no apps assigned is detected in the User Profiles, this alert is sent to the specified notification destination.
Action: No IT devices or apps assigned to new employees
Alert: IT devices approaching disposal/termination date
Configurable Condition: Number of days until the next disposal/termination date
Details: When the number of days falls below the configured "days until the next disposal/termination date," this alert is sent to the specified notification destination.
Action: Once disposed of or terminated, edit the device information and enter the new disposal/termination date.