Customer overrides take precedence over global settings, then system defaults. Changes affect future delivery and do not resend past events.

Authentication codes remain mandatory. Internal operational alerts are managed separately.