# Permission list for alerting

**URL:** <https://forum.opensearch.org/t/permission-list-for-alerting/3278>\
**Category:** Alerting\
**Created:** [July 8, 2020, 3:37pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278 "2020-07-08T15:37:30Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![sreekanth](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@sreekanth](https://forum.opensearch.org/u/sreekanth)\
**Post date:** [July 8, 2020, 3:37pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/1 "2020-07-08T15:37:30Z")

</div>

We are currently using Elasticsearch 7.4.2, SearchGuard and Alerting Plugin 1.4.0. I have set up RBAC with specific roles, having permissions to view specific roles.

Now that I have added alerting plugin, these users when they login they are not able to create alerts. I have tried creating role as specified in the documentation and assign the role to the user through the backend role, but it did not help.

Could you point me towards documentation where it is specified on how the roles needs to be created for the alerting plugin to work in the above scenario. When I go into create monitor screen, this is what I see.

> no permission for indices:monitor/settings/get

Thanks,  
Sreekanth

---

<div class="post-metadata">

**Author:** ![ftianli](https://avatars.discourse-cdn.com/v4/letter/f/58956e/32.png) [@ftianli](https://forum.opensearch.org/u/ftianli)\
**Post date:** [July 8, 2020, 9:47pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/2 "2020-07-08T21:47:01Z")

</div>

Hi @sreekanth

The documentation is not correct, and I’m sorry that it confused you.  
Currently the Alerting plugin only support the `admin` role to configure.  
Any other roles can not use alerting for now.

Tianli

---

<div class="post-metadata">

**Author:** ![sreekanth](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@sreekanth](https://forum.opensearch.org/u/sreekanth)\
**Post date:** [July 9, 2020, 7:44am UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/3 "2020-07-09T07:44:49Z")

</div>

Thanks Tianli for the response, appreciate it. 🙂

---

<div class="post-metadata">

**Author:** ![sreekanth](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@sreekanth](https://forum.opensearch.org/u/sreekanth)\
**Post date:** [July 9, 2020, 8:19am UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/4 "2020-07-09T08:19:57Z")

</div>

Hi Tianli,

We actually got it to working with the following permissions. In case it helps others.  
OD\_ALERTING:  
index\_permissions:  
-  
index\_patterns:  
- ‘indexname\*’  
- ‘.opendistro-alerting\*’  
allowed\_actions:  
- SGS\_CRUD  
- SGS\_MANAGE  
tenant\_permissions:  
-  
tenant\_patterns: [

For index name you will have to provide the index against which you need alerting set up, I know it can turn counter productive for a large number of indices but for now we only have one index so we are good.

Thanks,  
Sreekanth

---

<div class="post-metadata">

**Author:** ![ftianli](https://avatars.discourse-cdn.com/v4/letter/f/58956e/32.png) [@ftianli](https://forum.opensearch.org/u/ftianli)\
**Post date:** [July 9, 2020, 5:16pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/5 "2020-07-09T17:16:19Z")

</div>

Hi Sreekanth,

Thank you for sharing the permission setting that make it possible to use Alerting plugin!  
I’m sure it will help others, and this is also a good resource for me.

Tianli

---

<div class="post-metadata">

**Author:** ![nickgregz](https://avatars.discourse-cdn.com/v4/letter/n/b5ac83/32.png) [@nickgregz](https://forum.opensearch.org/u/nickgregz)\
**Post date:** [July 30, 2020, 12:57pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/6 "2020-07-30T12:57:57Z")

</div>

Hi sreekanth,

unfortunately I am unable to even select SGS\_CRUD or SGS\_MANAGE for Action groups,  
is there an non standard plugin that needs to installed?

---

<div class="post-metadata">

**Author:** ![sreekanth](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@sreekanth](https://forum.opensearch.org/u/sreekanth)\
**Post date:** [July 30, 2020, 3:48pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/7 "2020-07-30T15:48:06Z")

</div>

Nopes no non standard plugin was installed, could you elaborate on what you mean by “unable to even select”

---

<div class="post-metadata">

**Author:** ![nickgregz](https://avatars.discourse-cdn.com/v4/letter/n/b5ac83/32.png) [@nickgregz](https://forum.opensearch.org/u/nickgregz)\
**Post date:** [July 31, 2020, 8:47am UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/8 "2020-07-31T08:47:23Z")

</div>

Thank you very much for your answer, in the version of Open Distro I am using(1.8) the Action groups is a dropdown with options and none of them are the two mentioned above.

---

<div class="post-metadata">

**Author:** ![sreekanth](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@sreekanth](https://forum.opensearch.org/u/sreekanth)\
**Post date:** [July 31, 2020, 1:09pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/9 "2020-07-31T13:09:44Z")

</div>

Well, in my case, I directly modified the file, so maybe you could try the same.

---

<div class="post-metadata">

**Author:** ![skkosuri-amzn](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/skkosuri-amzn/32/935_2.png) [@skkosuri-amzn](https://forum.opensearch.org/u/skkosuri-amzn)\
**Post date:** [August 31, 2020, 10:38pm UTC](https://forum.opensearch.org/t/permission-list-for-alerting/3278/10 "2020-08-31T22:38:34Z")

</div>

Closed on August 31, 2020, 10:38pm UTC


