000017420 - Event Stream Analysis module privileged user doesn't see the ESA Configured rules

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000017420
Applies ToRSA Security Analytics
RSA Security Analytics Event Stream Analysis
IssueEvent Stream Analysis module privileged user doesn't see the ESA Configured rules.
Resolution

The user must be assigned the built-in Event Stream Analyst role in Administration -> System -> Roles as it is and not the three permissions inside this role. (Manage Alerts, View Alerts Summary, Access Alerting Module)

If you want to assign additional permissions to the user (Investigation, Dashboards..etc), you can create a custom role that has these permissions and assign the user the "Event Stream Analyst" Role in addition to this custom role.

Legacy Article IDa65485

Attachments

    Outcomes