Alerts
The tenant manager's Overview opens with Alerts: what your domains need looked at, the most serious first. Each domain's page shows its own alerts above its tabs. With nothing to look at, there is no Alerts card at all.
Who sees them
Alerts are about your tenant's own domains, and only the people who run those domains see them:
- Owners and admins see every alert of the tenant's domains.
- Members with a custom role see the alerts their role's parts cover: Mail for DMARC and TLS reports and spam complaints, Users for paused senders, Domains for DNS, proof, removal and automatic DNS.
- An API key limited to some domains sees only those domains' alerts.
A report that can't be tied to one of your domains is never shown to you. Mailboxes on a shared domain (such as the free signup domains) don't make alerts in your tenant: the platform runs those domains.
What they say
| Alert | What it means | What to do |
|---|---|---|
| Messages sent as your domain failed DMARC | Other mail servers' DMARC reports counted messages with your domain in From that passed neither SPF nor DKIM, in the last 7 days. | Forged mail being turned away shows here too, which is DMARC working. If some of it is your own mail (a newsletter service, a website's contact form), add that service to SPF and have it sign with DKIM: see SPF, DKIM and DMARC. |
| DMARC failure reports | Reports of single failed messages, with their headers (only if you collect them). | Open them under the domain's Reports tab to see which sender failed. |
| Deliveries failed over TLS | Other servers' TLS reports say they could not deliver to your domain securely. | Check MTA-STS and the certificates under the domain's Signing and security tab. |
| Spam complaints | Recipients pressed Report spam on mail from your domain, in the last 7 days. | See Mail → Complaints: who sent it and to whom. Too many pause the sender. |
| Mailboxes can't send | Sending was paused after complaints. | Find out why, then resume them under People. |
| DNS records missing or different | The last DNS check found required records not in place. | Open the domain's DNS and health tab and choose Check DNS. See DNS setup. |
| Domain not proved | Its ownership record hasn't been checked, so someone else who proves the domain could claim it. | Publish the ownership record and choose Verify. |
| Domain being removed | A removal is waiting. | Keep it on the domain's page to stop it. |
| Automatic DNS could not publish | The last publish failed; the alert says why. | Fix the key or zone under the domain's DNS and health tab. |
Reports count for 7 days; a report whose own mail failed DMARC is left out, as it may be forged. Alerts are not marked read: each ends by itself when its 7 days pass or the problem is fixed.
Choosing an alert opens the page and tab where it is dealt with.
From the API and command line
GET /v1/tenants/{tenantId}/alerts (?days= for 1 to 90 days) lists them, with the same rules on who sees what.