Manage Kibana Universal Alerting

Access to Kibana Universal Alerting works at two levels. Role privileges control what each person can do in Kibana, such as create rules or triage alerts. Stored API keys control what rules, action policies, and workflows can do when they run in the background. For example, a rule runs with the API key of the user who last saved it. That user's privileges determine what data the rule can query.

Use the following pages to set up access for your team and keep those background runs authorized.

• Configure access: Set up a role with the Kibana feature privileges needed to create rules, triage alerts, and query alert data.
• Authorization: Understand which credential authorizes each rule, action policy, and workflow run, and how to diagnose and fix authorization errors.