Choose who gets reports and alerts

You want a client’s monthly report, custom reports and alerts to reach the right people — their IT lead, the office manager, a shared reports mailbox, or the technician on your team who looks after them — and to arrive in their mailbox rather than as an email from us. Every place you set recipients works the same way: you pick people from a directory, and the report goes into the mailbox that directory says is theirs.

The recipient picker appears on three of a client’s pages:

Tailor → Automated Reports — the monthly report’s client recipients.
Tailor → Custom Reports — each multi-report bundle, single course report and phish click alert.
Tailor → Dark Web Monitoring — the client-level security contacts for breach alerts.

And on three partner pages, for the lists that cover all your clients:

Settings → Automated Reports → Global Recipients — copied on every client’s monthly report.
Settings → Dark Web Monitoring → Partner-level security contacts — copied on every client’s breach alerts.
Settings → Organization Reports → Recipients — the scheduled organization report.

Who you can pick

The search lists matches in this order:

This client — people and shared mailboxes in the client’s own directory.
Your team — your partner admins, found in the directory of one of your clients. This is usually your own internal (NFR) client, so connect it with direct delivery on if you want your team picked here.
Other clients — people at your other clients.

What you see depends on your access:

Partner admins can pick from any of your clients.
Scoped admins can pick from the clients they have access to.
Client admins can pick from their own client only.

A recipient someone else picked stays on the list when you edit it, even if it’s from a client you can’t access.

Two ways to deliver

Each of a client’s lists has its own delivery setting:

Direct delivery — each recipient gets the report in their own mailbox, from the client’s sending name and address, the same way your clients’ training emails arrive. Recipients are picked from a directory: synced users and shared mailboxes. Someone picked from another client gets it through that client’s connection, so that client needs direct delivery on too; if it doesn’t, they get it by email.
Email delivery — the whole list gets the report by email from bounce@infimasec.com. Use this when someone who needs it isn’t in any of your clients’ directories, such as an outside auditor or your own helpdesk address.

A client’s list is one or the other, never a mix, so one outside address can’t quietly change how everyone else on the list gets their copy.

The partner lists have no delivery setting. Each person picked from a directory gets it in their mailbox when their client has direct delivery on, and by email otherwise. Typed addresses get it by email.

You’ll need

The client’s directory connected (Microsoft 365 or Google Workspace) with direct delivery on, for direct delivery. Without it, the client’s lists use email delivery.
To pick your own team, your internal (NFR) client connected the same way, with your team in its directory.

Walkthrough

Open the list. Open the client and go to the page for the report or alert — for example Tailor → Automated Reports and the Client Recipients card.
Pick recipients. Type a name or email address into the search box. Matches appear as you type, grouped under This client, Your team and Other clients; someone from another client shows that client’s name, and shared mailboxes are labelled Shared mailbox. Click one to add it.
Choose the delivery. On a client’s list, Direct delivery is selected when every recipient is from a directory and the client supports it. To add someone who isn’t in any directory, choose Email delivery and confirm, then type their address into Add an address that isn’t in a directory. On a partner list, type the address straight in.
Save. Monthly report recipients, security contacts and the partner lists save as you add and remove them. On a custom report, click Save on the schedule.

Each recipient shows how they’ll get it: Into mailbox, By email, or Not in directory.

You’ll know it worked when

The recipient shows Into mailbox under direct delivery, or By email under email delivery.
The next report or alert arrives in the recipient’s inbox from the client’s sending address (direct delivery) or from bounce@infimasec.com (email delivery). A technician picked from your internal client gets it in their own mailbox there.

Frequently asked

Why can’t I type an address? Under direct delivery, recipients come from a directory, so the report goes into a mailbox that directory says is theirs. To add an address that isn’t in any of your clients’ directories, switch the list to Email delivery. Everyone on that list then gets it by email from bounce@infimasec.com.

I can’t find someone from another client. You see only the clients you have access to, and client admins see only their own client. Ask a partner admin to add them.

My team doesn’t show up under Your team. Your team lists partner admins whose address is in one of your clients’ directories. Add your team to your internal (NFR) client and connect it, and they appear after its next directory sync.

Why is Direct delivery greyed out? Either the client’s directory isn’t connected with direct delivery on, or the list has addresses that aren’t from the directory. Remove those addresses and Direct delivery becomes available.

The shared mailbox I want isn’t in the search. Shared mailboxes come from the client’s Microsoft 365 directory and appear after the client’s next directory sync. Microsoft 365 room and equipment mailboxes appear too; pick the one you mean by name. Google Workspace clients can pick synced users.

A recipient shows “Not in directory”. That person or mailbox was removed from their client’s directory, or their client is no longer one of yours, so they no longer receive the report. Remove them from the list, or pick their replacement.

What happened to the recipients I’d already set up? They’re still there. After the client’s next directory sync, addresses that belong to someone in the client’s directory are matched to that person automatically, and lists made up entirely of directory recipients use direct delivery. Lists with an address from outside the directory stay on email delivery until you change them.

What happened to my partner-level recipients? They’re still there, as typed addresses that get the report or alert by email. To have someone get it in their mailbox instead, remove the address and pick them from the search.

Does a recipient get two copies if they’re on the partner list and the client list? No. Each address gets one copy.

Scheduled reports — what’s in the monthly bundle and when it goes out.
Custom reports — schedules outside the monthly bundle and phish click alerts.
Breach notifications — who hears about a new password breach.