# Waiver Expiration Notifications

Waiver Expiration Notifications send email alerts before a component waiver expires. These notifications help users take action before the waiver expiration date.

## Prerequisites

Before you configure Waiver Expiration Notifications:

- Repository Firewall must be enabled.
- Component waivers must already exist.
- Configure the base URL so notification emails contain valid links. See [Base URL](https://help.sonatype.com/en/notification-configuration.html#configure-the-base-url "Configure the Base URL").
- Configure email notifications so the system can send waiver expiration alerts. See [Email Notification](https://help.sonatype.com/en/notification-configuration.html#configure-email-notifications "Configure Email Notifications").
- You must have access to the supported owner level:
  - Root Organization
  - Repository Manager
  - Repository Container

## Configure waiver expiration notifications for a root organization

1. In Repository Firewall, go to _Dashboard_.
2. In the left navigation menu, select _Root Organizations_.
3. Select the root organization.
4. Open _Waiver Expiration Notifications_.
5. In the _Notification Schedule_ section, configure schedules.
   
   
6. In the _Notification Recipients_ section, configure recipients.
  
   
7. Save the configuration.

**Note**  
You can configure up to three reminder thresholds before waiver expiration.  
The root organization configuration applies to child owners that use inherited settings.

### Configure the notification schedule

You can configure the notification schedule.

Examples:

- 7 days before expiration
- 14 days before expiration
- 30 days before expiration

Each configured threshold triggers a separate email notification.

To configure notification thresholds:

1. In the _Notification Schedule_ section, select _\+ Add reminder_.
2. Enter the number of days before expiration.
3. Repeat the process for additional reminder thresholds.
4. Save the configuration.

### Configure notification recipients

You can configure notifications for:

- Direct email addresses
- Role-based recipients for the selected owner
- Both direct email addresses and role-based recipients

To configure recipients:

1. In the _Notification Recipients_ section, select the recipient type.
2. Enter the recipient information.
3. Select _\+ Add_.
4. Save the configuration.

## Configure waiver expiration notifications for a repository manager

1. In Repository Firewall, go to _Dashboard_.
2. In the left navigation menu, select _Repository Managers_.
3. Select the repository manager.
4. Open _Waiver Expiration Notifications_.
5. For non-root owners, you can choose one of the following configuration modes:
   - **Inherit from parent**: Uses the nearest ancestor configuration.
     
     
   - **Custom**: Uses notification settings configured for the selected owner.

When Inherit from parent is enabled, the owner uses the inherited notification schedule and recipients from the nearest configured ancestor.

If no owner in the hierarchy has a notification configuration, the system does not send waiver expiration notifications.
6. If you selected _Custom_, configure the notification schedule and recipients.
7. Save the configuration.

## Email notification contents

Waiver expiration notification emails include the following information:

- Component name
- Scope or owner where the waiver was granted
- Waiver expiration date
- Link to the policy report when the waiver applies to an application.