Skip to main content

Configure email notifications

Privilege Secure sends email for approval requests, approval results, command restriction actions, and subscribed reports. Email needs two settings in two places:

SettingWherePurpose
Website URLSystem Settings > EmailThe address that links in emails point to.
Simple Mail Transfer Protocol (SMTP) serverConfiguration > Service Nodes > <node> > Email Service > Email SettingsThe server that delivers the email.

Set the website URL​

Links in emails, such as the link an approver clicks to review a request, start with the Website URL.

  1. Select System Settings > Email.
  2. In Website URL, enter the console address in the form https://<nps-server>:<port>. For example: https://<nps-server-fqdn>:6500.
  3. Click Save.

The Email panel in System Settings with the Website URL field.

The value must be a well-formed URL. The field is empty by default.

warning

If Website URL is empty, links in approval and command restriction emails start with http://<host>:5000, where <host> is the server's host name. That address is wrong for a standard installation. Set Website URL to the console address.

Configure the SMTP server​

The Email Service sends mail through your SMTP server. Configure it on each service node that runs the Email Service.

  1. Select Configuration > Service Nodes.
  2. Select the node, then select Email Service.
  3. On the Email Settings tab, complete the fields in the table.
  4. Click Test Settings to check the connection to the SMTP server. The button is available after you complete the required fields.
  5. Click Save. The Save and Cancel buttons appear at the bottom of the page after you change a field.
FieldDescription
From AddressThe address shown in the From field of each email.
Hostname (FQDN or IP)The SMTP server.
PortThe SMTP port. The default is 25.
Use TLSSelect to encrypt the connection to the SMTP server. Cleared by default.
Use AuthSelect if the SMTP server requires authentication. Cleared by default.
Credentials for ConnectionThe service account that signs in to the SMTP server.

For example, to send through an unauthenticated relay on port 25, enter the relay's name in Hostname (FQDN or IP), enter privilege-secure@example.com in From Address, leave Use TLS and Use Auth cleared, and click Test Settings.

When you click Test Settings, enter a recipient address and click Send Email. The dialog shows "Test email sent. It should arrive shortly." The message has the subject "Test from Netwrix Privilege Secure", comes from your From Address, and carries the text in the dialog as its body. The message also appears on the Email Queue tab.

Approval emails​

When a session needs approval, Privilege Secure sends one email to each approver who has an email address. The subject is "Netwrix Privilege Secure Activity Session needs approval for: <requester>". The body lists:

  • Session Requested by
  • Activity
  • Resource
  • Start and End
  • Approval link
  • Notes
  • Ticket

The approval link is the Website URL followed by /dashboard/approval. For the Website URL https://<nps-server-fqdn>:6500, the link is https://<nps-server-fqdn>:6500/dashboard/approval.

The Email Service sends queued messages in cycles, so an email can arrive a minute or more after the request. Until then, the message shows <never> in the Sent column of the Email Queue tab.

View queued email​

The Email Queue tab on the Email Service page lists outgoing notifications. Search matches the To Address and Subject columns.