Capabilities

[Ash1]

We want to provide few capabilities to the team

Presently team has a capability to create email alert.

What capabilities need to be given to create auto cut alerts.

[yuanliu]

Are you talking about permissions?  Security might be a better forum. (There used to be a broader Admin forum but it's gone in the new board.)

What is an "auto cut alert", anyway?

[Ash1]

It’s not about security. We have option to create alerts in  splunk. So we have action items as alert trigger, email alert, auto cut etc

auto cut means creating service now incidents from Splunk to service now 

so for email alert we have schedule_search capability likewise what capability we need to give to create auto to create service now incident from Splunk to service now.