Alert templates are assigned to sites in the Site Group area of the Mist GUI. A site group is a logical grouping of sites that share common settings and policies, such as alert templates, WLAN profiles, switch profiles, and site tags. A site group can contain one or more sites, and a site can belong to one or more site groups.
To assign an alert template to a site group, you need to navigate to Organization > Site Groups and select the site group that you want to edit. Then, you need to click on the Alert Template tab and choose the alert template that you want to apply to the site group. You can also create a new alert template or edit an existing one from this tab.
An alert template is a configuration that defines the types of alerts that you want to monitor and receive notifications for on your network. Alerts are events that indicate ongoing network and device issues, such as device offline, AP reboot, PSK failure, rogue AP, etc. You can create and manage alert templates in the Monitor > Alerts > Alert Configuration area of the Mist GUI.

A rogue AP is an unauthorized access point that is installed on a network without the knowledge or consent of the network administrator. A rogue AP can pose a serious security threat to a network, as it can allow attackers to bypass the network's security policies and gain access to sensitive data or launch other attacks. A rogue AP can also interfere with the performance of the legitimate APs and cause network congestion or degradation.
A scanning radio is a device that can scan the wireless spectrum and detect the presence and characteristics of wireless networks. A scanning radio can be used for legitimate purposes, such as network monitoring, troubleshooting, or optimization. However, a scanning radio can also be used for malicious purposes, such as discovering vulnerable networks, capturing network traffic, or launching denial-of-service attacks. A scanning radio can pose a security threat to a network, as it can expose the network's SSID, encryption type, channel, and signal strength.

The status of user authentication will affect the pair of SLEs: Successful Connects and Time to Connect. These are two of the eight SLEs that Mist provides to measure the wireless network performance and user experience. SLE stands for Service Level Expectation and is a metric that tracks the percentage of time that a specific network condition is met within a given time range.
The Successful Connects SLE measures the percentage of time that the wireless clients can successfully authenticate and associate to the network. The Time to Connect SLE measures the average time that it takes for the wireless clients to complete the authentication and association process. Both of these SLEs depend on the status of user authentication, which is the process of verifying the identity and credentials of the wireless clients.
If the user authentication fails or takes too long, it will negatively affect the Successful Connects and Time to Connect SLEs. The user authentication can fail or take too long due to various reasons, such as incorrect credentials, unsupported encryption type, misconfigured RADIUS server, network congestion, etc. Mist can detect and classify these issues and provide alerts and recommendations to resolve them.