Skip to content

Platform Security Alerts

What this screen is for

Security alerts lists events on the platform that someone must look at: a break-glass sign-in of a designated platform administrator, and a platform ownership recovery run on the environment host. An alert stays open, whatever its age, until a platform administrator acknowledges it. The header bell lists the open ones beside the alert conditions that are firing, and its View all security alerts link, like the alert e-mail, opens this screen.

What must exist first

  • The platform context.
  • The permission to read platform security alerts, held by every built-in platform role. Without it the screen names the permission it needs.
  • To acknowledge, the permission to acknowledge platform security alerts, held by the platform super administrator only.

Decisions you make here

Platform alerts and tenant alerts

Alerts of switches between Platform alerts, the platform's own, and Tenant alerts, every tenant's break-glass sign-ins. Tenant alerts are read-only here: each tenant acknowledges its own, on every kind of deployment. Choose Open, Acknowledged or All in either view.

Who signed in, their address and their session are shown only if you may also read the break-glass designations, and for a tenant's alert only where the deployment lets the platform see tenant data (never on SaaS). Otherwise they read Withheld: the alert still shows its kind, its severity and when it happened.

Acknowledging a platform alert

Acknowledge records that you looked at the event, with your identity, the time and an optional note of at most 1,000 bytes of UTF-8 text, where an accented letter counts two. The alert stays as it is, and the acknowledgment is written to the platform audit trail. An alert is acknowledged once.

A break-glass session cannot acknowledge an alert, not even the one it raised: sign in normally first. After an ownership recovery, the recovered administrator acknowledges the alert from their first normal sign-in, ideally with a note naming who ran the recovery and why.

How it relates to other screens

The firing alert conditions in the bell open the health screen, and their destinations also receive these alerts by e-mail:

Platform administrators are designated for break-glass access on the users screen, and the platform's readiness is shown on its authentication policy:

Where to read more