Email notification for inactive/dormant user logins
Please add the ability for admins to receive an email notification when a user hasn't logged into an organisation for a configurable period (e.g. 3, 6, or 12 months). This should cover all users with access, including our own staff, as well as any accountants or bookkeepers invited into our organisation.
Access often persists long after someone has left our organisation or after an accountant/bookkeeper relationship has ended, and there's currently no easy way to spot this. An automated alert for dormant accounts would let admins proactively review and remove stale access, reducing security risk from old, unmonitored logins (e.g. if that person's credentials are compromised via a breach on an unrelated system).
Ideally this would be a periodic digest email (e.g. monthly) listing dormant users, with a direct link to the user management screen to remove access.
Hi 👋 your idea is being looked into by our Community team. We'll be in touch soon to update you once your idea has been reviewed.
Did you know you can join our Xero Research panel to be involved in early testing and research? Find out more and sign up through our website 🙂