# Email alert for user being removed from Access Profile **URL:** \ **Category:** Lifecycle & Governance\ **Tags:** provisioning, access-modeling\ **Created:** [March 5, 2024, 4:56pm UTC](https://community.sailpoint.com/discuss/t/email-alert-for-user-being-removed-from-access-profile/33115 "2024-03-05T16:56:33Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![nathanwray](https://avatars.discourse-cdn.com/v4/letter/n/90ced4/32.png) [@nathanwray](https://community.sailpoint.com/discuss/u/nathanwray)\ **Post date:** [March 5, 2024, 4:56pm UTC](https://community.sailpoint.com/discuss/t/email-alert-for-user-being-removed-from-access-profile/33115/1 "2024-03-05T16:56:33Z")
We have a use case where an app owner is requesting we trigger an email notification to them when a user gets removed from an access profile (the profile is provisioned into AD but the access also requires work in a non-connected system as well).  This is the first time we are looking at something new instead of updating an existing object so I any help pointing me to documentation or suggestions are appreciated. ---
**Author:** ![paul\_patti](https://sea3.discourse-cdn.com/sailpoint2/discuss/user_avatar/community.sailpoint.com/paul_patti/32/17860_2.png) [@paul\_patti](https://community.sailpoint.com/discuss/u/paul_patti)\ **Post date:** [March 5, 2024, 6:28pm UTC](https://community.sailpoint.com/discuss/t/email-alert-for-user-being-removed-from-access-profile/33115/2 "2024-03-05T18:28:50Z")
Hello nathanwray, I’m not aware of that capability existing in IdentityNow, but if anyone else is - please chime in! In case you haven’t already seen it, [a similar idea](https://ideas.sailpoint.com/ideas/GOV-I-1613) at the [SailPoint Ideas Portal](https://ideas.sailpoint.com/ideas) is currently marked for **future consideration**. Feel free to add to the comments, or propose a different idea if that one wouldn’t meet your needs. ---
**Author:** ![amy\_shillinglaw](https://sea3.discourse-cdn.com/sailpoint2/discuss/user_avatar/community.sailpoint.com/amy_shillinglaw/32/17781_2.png) [@amy\_shillinglaw](https://community.sailpoint.com/discuss/u/amy_shillinglaw)\ **Post date:** [March 5, 2024, 10:36pm UTC](https://community.sailpoint.com/discuss/t/email-alert-for-user-being-removed-from-access-profile/33115/3 "2024-03-05T22:36:41Z")
I have some thoughts in different directions, but without knowing more about the current config, it’s hard to promote one over the other. Maybe something here triggers a solution that will work for you?: Option 1: Do the users get the access profile via a specific lifecycle state (i.e. provisioning tab of identity profiles)? If so, that’s an easy way for people to get notified when the AP gets deprovisioned along with the LCS change - there is an email notification section at the bottom of the page where you can define who receives the notification. Option2: If not the above situation, then workflows is a great option, and possibly the best. There is a “Provisioning Completed” trigger. You can create a filter for specific changes, get the list of identities who changed, a specific source account and identity access and send an email notification to whomever or manage a servicenow ticket. > **[Provisioning Completed - Workflow Triggers - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/workflows/workflow-triggers.html#provisioning-completed)** > > When building a workflow, you'll always start with a trigger. | SailPoint Identity Services Documentation Option 3: If you don’t have workflows, then you can leverage just the “Event Triggers” feature. Using the same “Provisioning completed” event trigger, build a subscription that sends a JSON payload to a system like your mail system. Event triggers either use http (or https://) for communicating the message or Amazon Event Bridge. > **[Using Event Triggers - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/common/event_triggers.html)** > > SailPoint Identity Services Documentation > **[Provisioning Completed | SailPoint Developer Community](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/)** > > Fires after a provisioning action completed on a source. Option 4: Saved Search With Email Subscription You can create a search around provisioning activity, specific to your AD group or access profile. If you know that certain attributes are different before and after the provisioning activity, you can leverage that info in your query. Again, without specifics about the attributes, source names, AP names, etc., it would challenging to promote a specific search query to fit your needs. I would specifically look at Events (start with type:provisioning) and Account Activity. There are a lot of options (see below). Once you have a search query established, you can SAVE it then SUBSCRIBE to it - for yourself and other admins who need to know. While this is not the same as “real time” notification of changes of workflows and event triggers, you could run the saved search Daily (at multiple times per day. One of the options in a saved search subscription is to “Send the report even when no items match the query”. With that toggled OFF, you only get the email when results are found: > **[Searching Event Data - Searchable Fields - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/search/searchable-fields.html#searching-event-data)** > > The organization of the data in your tenant is called the data model, and understanding this data model can help you create the most effective search queries. | SailPoint Identity Services Documentation > **[Searching Account Activity Data - Searchable Fields - SailPoint Identity...](https://documentation.sailpoint.com/saas/help/search/searchable-fields.html#searching-account-activity-data)** > > The organization of the data in your tenant is called the data model, and understanding this data model can help you create the most effective search queries. | SailPoint Identity Services Documentation > **[Subscribing to Saved Searches - Managing Saved Searches - SailPoint Identity...](https://documentation.sailpoint.com/saas/help/search/saved-searches.html#subscribing-to-saved-searches)** > > If you create a search query that you find especially helpful, you can save it so that you can use it at a later date. These searches are stored in the vertical toolbar and you can access them at any time. | SailPoint Identity Services Documentation ---
**Author:** ![nathanwray](https://avatars.discourse-cdn.com/v4/letter/n/90ced4/32.png) [@nathanwray](https://community.sailpoint.com/discuss/u/nathanwray)\ **Post date:** [March 11, 2024, 12:53pm UTC](https://community.sailpoint.com/discuss/t/email-alert-for-user-being-removed-from-access-profile/33115/4 "2024-03-11T12:53:31Z")
Thanks for the suggestions, we will review and see which one fits our needs best.