github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 01:38:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

[DOCS] Granular connector RBAC (#207136)

Browse source
This commit is contained in:
Lisa Cawley 2025-01-20 12:51:21 -08:00 • committed by GitHub
parent 77dc52f963
commit 9d4f54a7ce
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/management/connectors/action-types/crowdstrike.asciidoc
View file

@ -12,6 +12,8 @@ preview::[]
The CrowdStrike connector communicates with CrowdStrike Management Console via REST API.
To use this connector, you must have authority to run {endpoint-sec} connectors, which is an *{connectors-feature}* sub-feature privilege. Refer to <<kibana-privileges>>.
[float]
[[define-crowdstrike-ui]]
=== Create connectors in {kib}

2
docs/management/connectors/action-types/sentinelone.asciidoc
View file

@ -12,6 +12,8 @@ preview::[]
The SentinelOne connector communicates with SentinelOne Management Console via REST API.
To use this connector, you must have authority to run {endpoint-sec} connectors, which is an *{connectors-feature}* sub-feature privilege. Refer to <<kibana-privileges>>.
[float]
[[define-sentinelone-ui]]
=== Create connectors in {kib}

5
docs/user/alerting/alerting-setup.asciidoc
View file

@ -64,10 +64,11 @@ a|
====
The *{connectors-feature}* feature privilege is required to manage connectors.
To add rule actions and test connectors, you require only `Read` privileges.
By default, `All` privileges include authority to run {endpoint-sec} connectors (such as SentinelOne and CrowdStrike) unless you customize the sub-feature privileges.
By default, `All` privileges for the *Rules Settings* feature include authority to edit flapping detection settings unless you customize the sub-feature privileges.
Likewise, you can customize the *Rules Settings* sub-feature privileges related to flapping detection settings.
preview:[] To create a rule that uses the <<cases-action-type,Cases connector>>, you must also have `all` privileges for the *Cases* feature.
To create a rule that uses the <<cases-action-type,Cases connector>>, you must also have `All` privileges for the *Cases* feature.
The rule type also affects the privileges that are required.
For example, to create or edit {ml} rules, you must have `all` privileges for the *Analytics > {ml-app}* feature.