Which Credentials Will Be Used When a Corrective Action Runs

In order to run a Corrective Action, it must be run by a user with the CREATE_CA privilege. The following table lists scenarios under which Corrective Actions are run and which user credentials are used when the Corrective Action is executed.

Scenario Credentials Used
Corrective Action is run when directly associated with metric settings for a target. The Corrective Action is executed using the privileges of the user who associates the Corrective Action to the target metric threshold.

Corrective Action is run when associated with a monitoring template applied to a target.

Corrective Action is executed using the privileges of the user who associates underlying template to the target.
Corrective Action is associated with a monitoring template that is part of an Administration Group or Template Collections Administration Group. If the Corrective Action is part of a monitoring template/template collection that is automatically applied to an administration group, the preferred credentials of the user who associated the template with the administration group will be used for the corrective action.

Corrective Action is associated with an Event Rule.

Note: This applies to target availability events, metric alerts, compliance events

Corrective Action is executed using the privileges of the Event Rule owner.