https://community.splunk.com/t5/Getting-Data-In/Capability-to-edit-alerts/m-p/665604#M111789 <P>I believe that's covered by the <FONT face="courier new,courier">schedule_search</FONT> capability.</P> Thu, 19 Oct 2023 19:19:37 GMT richgalloway 2023-10-19T19:19:37Z https://community.splunk.com/t5/Getting-Data-In/Capability-to-edit-alerts/m-p/662618#M111788 <P>Hello everyone!</P><P>I create the role for splunk users, which will be able to edit alerts.</P><P>What capabilities should I choose for such users? To&nbsp;be minimal and sufficient</P> Thu, 19 Oct 2023 15:44:44 GMT https://community.splunk.com/t5/Getting-Data-In/Capability-to-edit-alerts/m-p/662618#M111788 bosseres 2023-10-19T15:44:44Z https://community.splunk.com/t5/Getting-Data-In/Capability-to-edit-alerts/m-p/665604#M111789 <P>I believe that's covered by the <FONT face="courier new,courier">schedule_search</FONT> capability.</P> Thu, 19 Oct 2023 19:19:37 GMT https://community.splunk.com/t5/Getting-Data-In/Capability-to-edit-alerts/m-p/665604#M111789 richgalloway 2023-10-19T19:19:37Z