As a super administrator for your organization, you need to grant permission for another admin or user to access the alert center. You can grant view-only or full access.
Before you begin
- If you assign the Super Admin or Services Admin pre-built role, the admin already has full access to the alert center. If you want to change their access, you need to choose an option below and reassign the admin to a custom role. You cannot change any privileges in pre-built roles.
- For users or admins without the Super Admin or Services Admin pre-built role, you need to create a custom role and then assign the alert center privilege to it. Or, you can modify an existing custom role to include alert center privileges.
- Custom roles for specific organizational units are only available for certain privileges. Currently, you can’t grant the Alert Center privilege to a user to perform management tasks for an organizational unit.
- In addition to the alert center privilege, administrators need specific privileges to access rule-based alerts. For example, you'll need the DLP privilege to view the Data loss prevention alert. For details, see Privileges needed to access rule-based alerts.
Option 1: Create new custom role and grant access to the alert center
-
Go to Create a custom role and follow the steps.
- For privileges, under Alert Center, choose an option:
- To grant full access to the alert center, check the Full access box.
- To grant view-only access, check the View access box. You might need to uncheck the Full access box first.
- To grant access to VirusTotal reports, check the View VirusTotal reports and View access boxes (you might need to uncheck the Full access box first).
- Click Continue and Create Role.
- Follow the steps to assign the custom role to users.
Option 2: Update a custom role to include alert center privileges
You must be signed in as a super administrator for this task.
-
Sign in to your Google Admin console.
Sign in using an account with super administrator privileges (does not end in @gmail.com).
-
In the Admin console, go to Menu
Account
Admin roles.
- For the user that you want to grant access to, click the custom role the user is assigned to.
- Click Privileges.
- Under Alert Center, choose an option:
- To grant full access, check the Full access box.
- To grant view-only access, check the View access box. You might need to uncheck the Full access box first.
- To grant access to VirusTotal reports, check the View VirusTotal reports and View access boxes (you might need to uncheck the Full access box first).
- Click Save.
Privileges needed to access rule-based alerts
In addition to the alert center privilege, you'll need the following privileges to access specific rule-based alerts.
| Alert type | Privilege needed |
|---|---|
| Reporting rules alert | Reports privilege |
| Data loss prevention alert | DLP > View DLP rule privilege DLP > Manage DLP rule privilege |
| Activity rule alert |
Security Center > Activity Rules > View privilege Note: In addition to the alert center privilege and the above Security Center privileges, administrators will also need access to specific data sources in the security center to view activity rule alerts. |
