Skip to content
English - United States
  • There are no suggestions because the search field is empty.

Managing Teams & Notifications

Setup Teams to receive Notifications from Tello.

Published Date: May 1, 2026 | Last Updated: May 28, 2026

Overview

Teams in Tello IAM route access change notifications to the right people. When a User's permissions change — through a Role Template assignment, a direct access change, or a drift event detected in a connected application — Tello IAM notifies the manager assigned to that User's Team by email.

Teams do not control access. Assigning a User to a Team does not grant or restrict any permissions. Access is managed exclusively through Role Templates and direct assignments. Teams exist to keep the right people informed when access changes occur.

Plan your Team structure

Teams typically map to organizational structure — one Team per department, business unit, or reporting line is the most common approach. For each Team, identify:

  • Team name — a descriptive label, typically the department or group name
  • Manager — the person who receives email notifications when a User in this Team experiences an access change. This is typically the department lead or direct manager.
  • Members — the Users whose access change notifications route to this Team's manager

Every User should be assigned to a Team. Without a Team assignment, access change notifications for that User have no destination. For Users who do not fit neatly into a department structure, consider creating a catch-all Team routed to the IT department or a platform Administrator.

Create a Team

  1. Navigate to Teams in the left navigation.
  2. Select + Create New.
  3. Enter a name in the Team Name field.
  4. Select the Users to add as members. If the Department attribute is configured on User records, an entire department can be added at once using the department filter.
  5. Review the name and member list and select Submit.
  6. On the Team detail page, select Add Manager.
  7. Search for and select the User to designate as manager. Review and configure the notification permissions for the manager.
  8. Select Assign Manager.

Repeat this process for each Team in the organization. More than 1 manager can be assigned to a Team — each manager receives notifications independently for Users in the Team.

Add members to an existing Team

  1. Navigate to Teams and select the Team.
  2. In the Members section, select Add Members.
  3. Select the Users to add and select Confirm.

Remove a member from a Team

  1. Navigate to Teams and select the Team.
  2. In the Members section, locate the User to remove.
  3. Select the remove option next to the User and confirm.

Removing a User from a Team stops notifications for that User from routing to the Team's manager. If the User is not added to another Team, access change notifications for that User will have no destination.

Add or change a manager

  1. Navigate to Teams and select the Team.
  2. In the Managers section, select Add Manager to add a new manager, or select the remove option next to an existing manager to remove them.
  3. When adding, search for the User, configure their notification permissions, and select Assign Manager.

Delete a Team

  1. Navigate to Teams and select the Team.
  2. Select Delete and confirm.

Deleting a Team removes the notification routing for all members. Users who were members of the deleted Team will not generate notifications until they are added to another Team.

How notifications work

Each manager has individual notification settings that control which events trigger an email. These are configured when the manager is assigned and can be updated at any time. Two notification types are available:

  • Notify when users are added to, or removed from the team — the manager receives an email when a User is added to or removed from the Team
  • Notify when users are granted or revoked access to integrations — the manager receives an email when a User's permissions change in a connected application, including provisioning, deprovisioning, and drift events

Either or both notification types can be enabled per manager. A manager with all notifications disabled will remain assigned to the Team but will not receive any emails. Notifications are sent automatically when the triggering event occurs. The Team manager does not need access to the Tello IAM platform to receive them.

Update manager notification settings

  1. Navigate to Teams and select the Team.
  2. In the Managers section, select the manager whose settings need to be updated.
  3. Toggle each notification type on or off as needed.
  4. Select Save Changes.

Verify Team coverage

After creating all Teams, confirm that every User has been assigned to at least one Team. Users can belong to multiple Teams — for example, a User might be a member of both a department Team and a cross-functional Team. Any User without a Team assignment will not generate notifications when their access changes.

Related articles


tello-logo-color-1 Seasoft Security Solutions LLC | TelloIAM