|Applies To||RSA Security Analytics|
RSA Security Analytics Event Stream Analysis
|Issue||Event Stream Analysis module privileged user doesn't see the ESA Configured rules.|
The user must be assigned the built-in Event Stream Analyst role in Administration -> System -> Roles as it is and not the three permissions inside this role. (Manage Alerts, View Alerts Summary, Access Alerting Module)
If you want to assign additional permissions to the user (Investigation, Dashboards..etc), you can create a custom role that has these permissions and assign the user the "Event Stream Analyst" Role in addition to this custom role.
|Legacy Article ID||a65485|