{"id":14565,"date":"2025-09-01T10:25:50","date_gmt":"2025-09-01T09:25:50","guid":{"rendered":"https:\/\/gatlabs.com\/knowledge\/?post_type=docs&#038;p=14565"},"modified":"2025-09-01T10:25:50","modified_gmt":"2025-09-01T09:25:50","password":"","slug":"how-to-set-up-user-security-alerts-gat-plus","status":"publish","type":"docs","link":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/","title":{"rendered":"How to Set Up User Security Alerts with GAT+"},"content":{"rendered":"<p>Stay alert and always up to date with what&#8217;s happening on your domain. With <a href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-overview\/\" target=\"_blank\" rel=\"noopener\">GAT+<\/a> push notification alerts, administrators can increase their vigilance and domain security by configuring multiple alerts simultaniously.<\/p>\n<p>One of the many alerts available in GAT+ is the User Security alert, which can be used to notify you of potential account takeover attempts, especially when multiple changes occur in a short period of time or from unusual locations. This is definitely something to watch out for, and that&#8217;s why the User Security alert is so helpful.<\/p>\n<p>Below you will find steps explaining how to configure an alert that will suit your needs.<\/p>\n<h2>Create Users Security alerts<\/h2>\n<p>To create the Users Security alert, navigate to <strong>GAT+ (1) &gt; Configuration (2) &gt; Alert Rules (3) &gt;<\/strong> click on the &#8220;<strong>+<\/strong>&#8221; button <strong>(4)<\/strong> to add a rule.<\/p>\n<p>A new wizard window will appear, where you can select the alert <strong>Type (5) : User Security (6)<\/strong> from the drop-down menu. The alert Name will be automatically filled in and will have the same name as the alert type itself \u2013 <strong>Name: User Security (7)<\/strong>. Note: The alert Name can be customized to differentiate between different alert types.<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone wp-image-14575 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2.png\" alt=\"GAT+ dashboard, showing the Alert Rules section and the &quot;+&quot; button that allows configuring the alert. In this example, the alert type is configured as &quot;Users Security&quot;.\" width=\"1920\" height=\"912\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2.png 1920w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2-300x143.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2-1024x486.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2-768x365.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2-1536x730.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-1-2-360x171.png 360w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<h2>Select alert event type<\/h2>\n<p>Once the <strong>Users Security<\/strong> type is selected <strong>(1)<\/strong>, all the available users security events that can be configured and trigger the alert are being displayed <strong>(2)<\/strong>.<\/p>\n<p>Tick the box(es) next to each alert event type that you wish to trigger the alert <strong>(3)<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-14580 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3.png\" alt=\"The &quot;Users Security&quot; alert different triggers are displayed and can be selected, such as the following: Password Changed, 2FA disabled, External forwarding enabled, Recovery email changed, Recovery phone changed, and\/or Recovery Question\/Answer changed.\" width=\"1920\" height=\"912\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3.png 1920w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3-300x143.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3-1024x486.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3-768x365.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3-1536x730.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-3-360x171.png 360w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<p>The <strong>Users Security<\/strong> alert type allows configuring different alert triggering events, and these are as follows:<\/p>\n<ul>\n<li><strong>Password Changed <\/strong>&#8211; alert informing about a change of the user account password<\/li>\n<li><strong>2FA disabled <\/strong>&#8211; alert informing 2FA has been disabled on user account<\/li>\n<li><strong>External forwarding enabled <\/strong>&#8211; alert notifying if external email forwarding is enabled<\/li>\n<li><strong>Recovery email changed <\/strong>&#8211; alert informing about a change of the user account recovery email<\/li>\n<li><strong>Recovery phone changed <\/strong>&#8211; alert informing about a change of the user account recovery phone number<\/li>\n<li><strong>Recovery Question\/Answer changed <\/strong>&#8211; alert informing about a change of the user account recover question\/answer<\/li>\n<\/ul>\n<h2>Select the Scope and Alert Recipient<\/h2>\n<p>Define the <strong>Scope<\/strong> of the alert <strong>(1)<\/strong>, e.g., individual user(s), groups or an entire organizational unit, that will be monitored for this type of behavior. This behavior may be a regular account security measure or a sign of a specific threat. It&#8217;s important to be aware of these events and monitor them.<\/p>\n<p>Finally, select the alert <strong>Recipient (2)<\/strong>, this can be an administrator creating this rule for their own awareness, or\/and another person responsible for domain security.<\/p>\n<p>Once ready, <strong>Save<\/strong> the settings <strong>(3)<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-14587 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4.png\" alt=\"The alert &quot;Scope&quot; and alert &quot;Recipients&quot; fields are displayed. Scope can be configured as follows: for an individual User(s), Group, or OUs. The &quot;Save&quot; button allows saving the alert configuration and activates the alert itself.\" width=\"1920\" height=\"912\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4.png 1920w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4-300x143.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4-1024x486.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4-768x365.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4-1536x730.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-4-360x171.png 360w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<h2>Review alert configuration<\/h2>\n<p>After clicking Save, the alert is acitvated and it can serves your needs.<\/p>\n<p>All its details can be reviewed under the Alert Rules section of GAT+, such as:<\/p>\n<ul>\n<li>alert <strong>Type (1)<\/strong><\/li>\n<li>alert <strong>Scope (2)<\/strong><\/li>\n<li>Alert <strong>Recipients (3)<\/strong><\/li>\n<li>alert <strong>Summary (4)<\/strong><\/li>\n<li>alert additional <strong>Actions (5)<\/strong>, such as the following:\n<ul>\n<li>&#8220;<strong><em>eye&#8221;<\/em><\/strong> icon &#8211; review the alert configuration<\/li>\n<li>&#8220;<em><strong>pencil<\/strong><\/em>&#8221; icon &#8211; edit the alert configuration<\/li>\n<li>&#8220;<strong>x<\/strong>&#8221; icon &#8211; delete the alert configuration entirely<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-14589 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5.png\" alt=\"Alert Rule configuration such as its Type, Scope, Alert Recipients, alert Summary can be reviewed anytime under GAT+ Alert Rules section. More actions can be taken on the alert rule itself under the Actions column, such as: review, edit or delete the configuration.\" width=\"1920\" height=\"912\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5.png 1920w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5-300x143.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5-1024x486.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5-768x365.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5-1536x730.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-5-360x171.png 360w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<h2>Review the alerts logs<\/h2>\n<p>To review if the alert was triggered by any of the configured alert event triggers, navigate to <strong>GAT+ &gt; Audit and Management (1) &gt; Alerts<\/strong> <strong>(2) &gt; <\/strong>and apply a filter <strong>(3)<\/strong> that returns only the alert events under the specific alert Type <strong>(4)<\/strong>, e.g. <em><strong>Rule Type &#8211; equal &#8211; Users Security.<\/strong><\/em><\/p>\n<p>Once ready, hit the <strong>Apply<\/strong> button <strong>(5).<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-14590 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7.png\" alt=\"Alert logs filter is applied under the GAT+ Alerts section. The filter searches for the Rule Type called &quot;Users Security&quot;\" width=\"1920\" height=\"912\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7.png 1920w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7-300x143.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7-1024x486.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7-768x365.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7-1536x730.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-7-360x171.png 360w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<p>GAT+ returns all the records defined by your filter, and will display them so you can review the following details:<\/p>\n<ol>\n<li><strong>Rule Type (1)<\/strong><\/li>\n<li><strong>User (2)<\/strong> &#8211; the person triggered the alert<\/li>\n<li><strong>Summary (3)<\/strong> &#8211; more detailed overview of the alert trigger(s), and underneath also the events that run the alerts <strong>(4)<\/strong>, e.g. <strong><em>password changed<\/em><\/strong> even, alongside the timestamps of the event<\/li>\n<li><strong>Created (5)<\/strong> &#8211; the time when the alert was logged by the system<\/li>\n<li><strong>Actions (6)<\/strong> &#8211; see Alert details<\/li>\n<\/ol>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-14592 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8.png\" alt=\"The alert logs for the alert Type : Users Security are displayed and can be reviewed individually. \" width=\"1920\" height=\"912\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8.png 1920w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8-300x143.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8-1024x486.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8-768x365.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8-1536x730.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-8-360x171.png 360w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<h2>Review the email notification<\/h2>\n<p>Once an alert is triggered, the alert Recipients receive an automated message containing the alert details.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-14593 size-full\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9.png\" alt=\"An alert email notification is sent to alert recipients, revealing the alert type, rule violation, and the user who triggered the alert.\" width=\"1539\" height=\"892\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9.png 1539w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9-300x174.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9-1024x594.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9-768x445.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9-1536x890.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2025\/08\/Security-9-360x209.png 360w\" sizes=\"(max-width: 1539px) 100vw, 1539px\" \/><\/p>\n<h2>Relevant posts<\/h2>\n<ul>\n<li><a href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-gmail-alerts-for-google-workspace-users\/\" target=\"_blank\" rel=\"noopener\">Set Up Gmail Alerts for Google Workspace Users with GAT+<\/a><\/li>\n<li><a href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/alert-on-any-login-event-associated-with-your-g-suite-users\/\" target=\"_blank\" rel=\"noopener\">Setting Up User Login Alerts in GAT+<\/a><\/li>\n<li><a href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/alert-on-negative-login-by-any-g-suite-user\/\">Alert on Negative Login by Any Google Workspace User<\/a><\/li>\n<li><a href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/alert-when-2fa-backup-code-is-used-by-any-user\/\" target=\"_blank\" rel=\"noopener\">Alert When 2FA Backup Code is Used by Any User with GAT+<\/a><\/li>\n<li><a href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/alert-when-2fa-is-disabled-for-any-user-in-your-google-domain\/\" target=\"_blank\" rel=\"noopener\">Alert when 2FA is disabled for any user in your google domain with GAT+<\/a><\/li>\n<\/ul>\n<h2>Frequently Asked Questions<\/h2>\n<p><b>Q: What events can trigger a User Security alert?<\/b><\/p>\n<p><b>A:<\/b> You can configure a User Security alert in GAT+ to notify you of several key events, including a user&#8217;s password being changed, 2FA being disabled, external email forwarding being enabled, or a recovery email, phone number, or question\/answer being changed on their account.<\/p>\n<p><b>Q: How do I review the log of triggered alerts?<\/b><\/p>\n<p><b>A:<\/b> To review the logs, navigate to <b>GAT+ &gt; Audit and Management &gt; Alerts<\/b>. From there, you can apply a filter to view all alert events under the specific &#8220;Users Security&#8221; rule type.<\/p>\n<p><b>Q: Can I customize the name of an alert rule?<\/b><\/p>\n<p><b>A:<\/b> Yes. The article states that you can customize the alert&#8217;s name to differentiate between different alert types, even though it defaults to the alert type itself.<\/p>\n<p><b>Q: Who receives the notification when an alert is triggered?<\/b><\/p>\n<p><b>A:<\/b> The alert recipients you select when you configure the rule receive an automated email notification. This can be the administrator who created the rule or any other person responsible for domain security.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Stay alert and always up to date with what&#8217;s happening on your domain. With GAT+ push notification alerts, administrators can increase their vigilance and domain security by configuring multiple alerts simultaniously. One of the many alerts available in GAT+ is the User Security alert, which can be used to notify you of potential account takeover [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":8349,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_category":[20],"glossaries":[],"doc_tag":[24],"class_list":["post-14565","docs","type-docs","status-publish","has-post-thumbnail","hentry","doc_category-users-management","doc_tag-gat"],"year_month":"2026-04","word_count":878,"total_views":"1125","reactions":{"happy":"1","normal":"0","sad":"0"},"author_info":{"name":"Monika","author_nicename":"monika","author_url":"https:\/\/gatlabs.com\/knowledge\/author\/monika\/"},"doc_category_info":[{"term_name":"Users Audit &amp; Management","term_url":"https:\/\/gatlabs.com\/knowledge\/tech-tips-category\/users-management\/"}],"doc_tag_info":[{"term_name":"GAT+","term_url":"https:\/\/gatlabs.com\/knowledge\/tech-tips-tag\/gat\/"}],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to Set Up User Security Alerts with GAT+<\/title>\n<meta name=\"description\" content=\"Learn how to configure and use GAT+ User Security alerts to monitor your Google Workspace domain. Get automatic notifications for suspicious events like password changes or disabled 2FA\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Set Up User Security Alerts with GAT+\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure and use GAT+ User Security alerts to monitor your Google Workspace domain. Get automatic notifications for suspicious events like password changes or disabled 2FA\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/\" \/>\n<meta property=\"og:site_name\" content=\"GAT Knowledge Base\" \/>\n<meta property=\"og:image\" content=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2023\/08\/Users-Audit-Management.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/\",\"name\":\"How to Set Up User Security Alerts with GAT+\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Users-Audit-Management.jpg\",\"datePublished\":\"2025-09-01T09:25:50+00:00\",\"description\":\"Learn how to configure and use GAT+ User Security alerts to monitor your Google Workspace domain. Get automatic notifications for suspicious events like password changes or disabled 2FA\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/#primaryimage\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Users-Audit-Management.jpg\",\"contentUrl\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Users-Audit-Management.jpg\",\"width\":2400,\"height\":1200,\"caption\":\"Users Audit & Management\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/how-to-set-up-user-security-alerts-gat-plus\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tech Tips\",\"item\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How to Set Up User Security Alerts with GAT+\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#website\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/\",\"name\":\"GAT Knowledge Base\",\"description\":\"Your source of all things GAT\",\"publisher\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#organization\",\"name\":\"GAT Labs Knowledge Base\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/Group-1159.svg\",\"contentUrl\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/Group-1159.svg\",\"width\":361,\"height\":97,\"caption\":\"GAT Labs Knowledge Base\"},\"image\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Set Up User Security Alerts with GAT+","description":"Learn how to configure and use GAT+ User Security alerts to monitor your Google Workspace domain. Get automatic notifications for suspicious events like password changes or disabled 2FA","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/","og_locale":"en_GB","og_type":"article","og_title":"How to Set Up User Security Alerts with GAT+","og_description":"Learn how to configure and use GAT+ User Security alerts to monitor your Google Workspace domain. Get automatic notifications for suspicious events like password changes or disabled 2FA","og_url":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/","og_site_name":"GAT Knowledge Base","og_image":[{"width":2400,"height":1200,"url":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2023\/08\/Users-Audit-Management.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/","url":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/","name":"How to Set Up User Security Alerts with GAT+","isPartOf":{"@id":"https:\/\/gatlabs.com\/knowledge\/#website"},"primaryImageOfPage":{"@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/#primaryimage"},"image":{"@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/#primaryimage"},"thumbnailUrl":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2023\/08\/Users-Audit-Management.jpg","datePublished":"2025-09-01T09:25:50+00:00","description":"Learn how to configure and use GAT+ User Security alerts to monitor your Google Workspace domain. Get automatic notifications for suspicious events like password changes or disabled 2FA","breadcrumb":{"@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/#primaryimage","url":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2023\/08\/Users-Audit-Management.jpg","contentUrl":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2023\/08\/Users-Audit-Management.jpg","width":2400,"height":1200,"caption":"Users Audit & Management"},{"@type":"BreadcrumbList","@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-set-up-user-security-alerts-gat-plus\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gatlabs.com\/knowledge\/"},{"@type":"ListItem","position":2,"name":"Tech Tips","item":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/"},{"@type":"ListItem","position":3,"name":"How to Set Up User Security Alerts with GAT+"}]},{"@type":"WebSite","@id":"https:\/\/gatlabs.com\/knowledge\/#website","url":"https:\/\/gatlabs.com\/knowledge\/","name":"GAT Knowledge Base","description":"Your source of all things GAT","publisher":{"@id":"https:\/\/gatlabs.com\/knowledge\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gatlabs.com\/knowledge\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/gatlabs.com\/knowledge\/#organization","name":"GAT Labs Knowledge Base","url":"https:\/\/gatlabs.com\/knowledge\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/gatlabs.com\/knowledge\/#\/schema\/logo\/image\/","url":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/Group-1159.svg","contentUrl":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/Group-1159.svg","width":361,"height":97,"caption":"GAT Labs Knowledge Base"},"image":{"@id":"https:\/\/gatlabs.com\/knowledge\/#\/schema\/logo\/image\/"}}]}},"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs\/14565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/comments?post=14565"}],"version-history":[{"count":14,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs\/14565\/revisions"}],"predecessor-version":[{"id":14606,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs\/14565\/revisions\/14606"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/media\/8349"}],"wp:attachment":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/media?parent=14565"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/doc_category?post=14565"},{"taxonomy":"glossaries","embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/glossaries?post=14565"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/doc_tag?post=14565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}