Set preferences for security event notifications

Configure preferences for the types of notifications you want to receive for occurrences of specific security events. For each type, you designate whether to receive notifications by email, by push notification in Now Mobile, or in third party messaging applications such as Slack or Microsoft Teams.

Before you begin

To enable third party messaging applications to send security event notifications, you must activate the Messaging Notification (com.glide.notification.messaging) plugin. Individual users must configure their own settings. For details, see Notifications in messaging applications.

Role required: admin.

Procedure

1. In the Instance Security Center home page, click the profile menu, then click Notification Preferences.

   Table 1. Notification preferences

   Notification preference	Description
   Admin Login	Send the selected type of notification whenever other users with assigned admin roles log into this instance from a different IP address.
   Admin Unlock	Send the selected type of notification whenever an account for a high privilege user has been unlocked.
   Failed Login	Send the selected type of notification whenever other users fail to log in into this instance in less than the number of attempts defined in the glide.user.max_unlock_attempts property. If you don't configure this property, the default value is 5. To learn more about this property, see Specify lockout for failed login attempts.
   HP Role Added	Send the selected type of notification whenever a high privilege security role (including oauth_admin, admin, security_admin, and impersonator roles) is granted to another user. To learn more about elevating user security, see Elevate to a privileged role and Elevated privilege roles.
   Impersonation	Send the selected type of notification whenever another user is impersonating you. To learn more about impersonating users, see Impersonate a user.
   Security Elevation	Send the selected type of notification whenever other users are elevated to a security admin role in this instance.
   Weekly Digest	Send a weekly digest on the selected type of notification. It includes: A summary all security activities that took place in this instance throughout the week. The current daily compliance score for the instance.

2. For each type of security event, select the appropriate check boxes to designate the type of notifications to send you.
   You can select multiple notification methods for each.

   Check box	Description
   Email	Send an email for this type of security event.
   Slack	Send notifications for this type of security event through Slack. Note: This column appears only if you have set up Slack integration to the ServiceNow AI Platform.
   Teams	Send notifications for this security event through Microsoft Teams. Note: This column appears only if you have set up Microsoft Teams integration to the ServiceNow AI Platform.
   Push	Send push notifications on Now Mobile for this type of security event. Note: This column appears only if you first log into Now Mobile.
   Select All	Select a specific type of notification for all types security events. For example, click Select All located above Email if you want to receive email notifications for each security event type.

3. Click Save.