Email notification for inactive/dormant user logins
Please add the ability for admins to receive an email notification when a user hasn't logged into an organisation for a configurable period (e.g. 3, 6, or 12 months). This should cover all users with access, including our own staff, as well as any accountants or bookkeepers invited into our organisation.
Access often persists long after someone has left our organisation or after an accountant/bookkeeper relationship has ended, and there's currently no easy way to spot this. An automated alert for dormant accounts would let admins proactively review and remove stale access, reducing security risk from old, unmonitored logins (e.g. if that person's credentials are compromised via a breach on an unrelated system).
Ideally this would be a periodic digest email (e.g. monthly) listing dormant users, with a direct link to the user management screen to remove access.
Thanks for submitting your idea on Xero Product Ideas. We appreciate you taking time to let us know how we could improve Xero for you.
Your feedback will soon be reviewed by our Community team, and in the meantime this can begin to build support with votes from other community members.
If you're interested to see recent releases or get a pulse on what's coming soon see The Long and Short of it. 🙂