Skip to content

User Access Review Notifications

SimplePay sends Account Owners and Admin users with full access automated notifications to help them keep user access up to date. This supports regular access reviews in line with security and compliance requirements. There are two types of notification: one triggered by inactive users, and one for a periodic review of all user access levels.

How the Notifications Work

Both notifications are sent on the first working day of each month to all Account Owners and Admin users with full access on the account.

Accounts eligible for notifications

Notifications are sent only for paid accounts, and only to Account Owners and Admin users with full access who are themselves active.

Inactive user notification

This notification is sent by email and as an in-system notification when any users on the account have been inactive for 90 days or more. It prompts you to review whether those users still need access.

  • Email subject: "Please review inactive users with access to your SimplePay account"
  • In-system notification title: "Review inactive users with access to your account"
  • In-system notification link: Opens the Manage Users screen sorted by Last Activity ascending, so the most inactive users appear first
  • In-system notification expires: five working days after it's sent

Eligibility and exclusions

This notification is sent only for accounts that have been active for at least 90 days. The following user types are excluded from the inactive-user count:

  • API users
  • Employee self-service users
  • Pending-activation users

Periodic access review notification

If no inactive users are found on an account in a given month, SimplePay instead checks whether it's been more than six months since the last access review notification. If so, it sends a reminder by email and as an in-system notification to review all user access levels – not just inactive users.

  • Email subject: "Please review the user access levels on your SimplePay account"
  • In-system notification title: "User Access Level Review"
  • In-system notification link: Opens the Manage Users screen
  • In-system notification expires: ten working days after it's sent

First-time behaviour

If you haven't received this notification before, you may receive it shortly after your account becomes eligible.

Reviewing Users After a Notification

When you receive either notification:

  1. Click the link in the email to log in, or click the link in the in-system notification to go directly to the Manage Users screen. For inactive user notifications, the in-system notification link opens the list sorted by Last Activity (ascending), so the most inactive users appear first.

  2. Review each user and confirm whether they still need access.

  3. If a user no longer needs access, remove them or edit their role as appropriate.

Reviewing users at any time

You can filter and sort users by Last Activity at any time – you don't have to wait for a notification. See the Filtering and Sorting Users help page for more information.