def rule(event):
    if all(
        [
            event.deep_get("properties", "message", default="") in ["Add user", "Delete user"],
            event.deep_get("Status", default="") == "Sucess",
            not event.deep_get("Initiatied", "By", default="") == "%ApprovedUserUpn%",
        ]
    ):
        return True
    return False
