PIM Manager settings · Settings > Mail & alerting

Outbound webhook

Key	Alerting.WebhookUrl
Where	Settings > Mail & alerting > Alerting
Type	Text
Default	Blank (no webhook)
Confirmation	PIM Manager asks you to confirm before it is switched on.

What it does

An HTTPS address -- a Microsoft Teams incoming webhook or any endpoint that accepts JSON -- that receives each alert in addition to email. It works even when no mail sending is set up and is not affected by the email kill switch.

When set

When set: every enabled alert raised by the PIM Manager itself (break-glass, expiring access on Home, sessions revoked, test alerts, and job failures it records) is posted with its title, details, tenant name and a link back to PIM Manager. Only https addresses on public host names are accepted; private, loopback and bare host names are rejected and the card says why.

When blank or default

When blank: alerts are delivered by email only.

Risk and how to reverse it

The URL is itself a credential -- anyone who has it can post into that channel -- so only Admins can see it. Alert details (account names, groups, roles) leave your environment to that endpoint. Alerts raised by the scheduled engine job are mailed but not posted to the webhook. Reversible: clear the URL and save.

Requires

Admin role in PIM Manager. Outbound HTTPS from the PIM Manager to the endpoint. The 'Teams / webhook alerting' feature switch (Feature customization, on by default) must be on: switched off, nothing is posted even with a URL saved.