The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Enabling access groups for alerts using the CLI

Prev Next

Use the commands in this topic to enable the use of access groups for alerts.

To enable access groups for alerts:
  1. Log in to the Central Management System appliance.

  2. Go to CLI configuration mode:

    cm-hostname > enable
    cm-hostname # configure terminal
  3. Enable the access group for alerts feature:

    cm-hostname (config) # aaa authorization access-groups area alerts enable [force]

    where force suppresses the prompt to confirm your action.

  4. If prompted to confirm your action, enter YES.

  5. Verify your change:

    cm-hostname (config) # show aaa authorization access-groups
  6. Save your change:

    cm-hostname (config) # write memory

Example

The following example enables access groups for alerts on the cm-05 appliance.

cm-05 (config) # aaa authorization access-groups area alerts enable
Type 'YES' to confirm enabling access groups that limit access to certain objects like alerts for non-admin users: YES
cm-05 (config) # show aaa authorization access-groups
AAA Access-groups enabled for : alerts

----------------------------------------------
# Group: nx-alerts    
----------------------------------------------
# Rule           Statements
----------------------------------------------
#1               Not Match Alert Severity: minor
...

Note

For an example of a fully configured access group, see Example: configuring an access groups for alerts.