Steps to reproduce
The incident belongs to a different domain than the user who sent the email
If you consider the user AAAA in the wrong domain or want to know why it is different than expected and when it has changed - you can enable auditing on the sys_user table through the Dictionary entry here:
Consider either changing the domain of the user, or the domain of the incident.
|Note: This issue could occur after upgrading an instance or modifying the user records.|
|Note: Ensure these actions are tested in sub-production instances before implemented in production environments.|