Product Guides•stable•Updated 2026-05-15

Alerts — Cases

Group related alerts into operational work items.

What this page is for

Cases is the main working view. It groups related alerts into a single operational unit with owner, severity, impact, timeline, recommendations, approvals, runbooks, and incident context.

Who uses it

  • FinOps operators
  • Engineering managers
  • Ops teams

What you see

  • Grouped alerts.
  • Owner or team.
  • Consolidated severity.
  • Business or financial impact.
  • Timeline and related objects.

What you can do

  • Assign owner.
  • Acknowledge.
  • Resolve.
  • Archive.
  • Declare incident.
  • Open related recommendation, approval, cap, cost trend, or runbook.

Permissions and safety

  • Case actions require alert-operation permissions.

Operational notes

  • Cases transform noise into work.

What this page is not for

  • Replacing the raw Alerts view.
  • Owning approvals or optimizations directly.

Recommended workflow

  1. Confirm that you are in the right workspace and environment.
  2. Use filters before changing configuration or interpreting results.
  3. Open the detail drawer when available.
  4. Check related objects such as alerts, approvals, costs, policies, runs, deliveries, or audit entries.
  5. Apply changes only when the impact is clear.
  6. Re-check the page after the backend refreshes.
  7. Export or copy IDs when you need to escalate.

Related product areas