Description
Description
In 8.18 and 9.0 we'll release / break out two new privileges in security solution that will apply to the timeline and notes feature. Previous to this release, these are the privileges that are available:
With the new release, these privileges will be available:
Previously, timeline and notes access was given automatically to users that had been given the Security read or all access (with read, writing notes/saving timelines would not be possible). We've seen that these settings were too bread for some customers that wanted to narrow down privileges for timelines specifically.
These new privileges come with an automatic migration. Meaning that users that had the security read privilege, will automatically get timeline read and notes read with the next release (same for all).
Background & resources
- PRs: [SecuritySolution] Breaking out timeline & note privileges kibana#201780
- Issues/metas: https://github.com/elastic/security-team/issues/7998
- Point of contact: @janmonschke
- Test environments: TBD
Which documentation set does this change impact?
ESS and serverless
ESS release
N/A
Serverless release
The week of January 15th or whenever serverless gets deployed after that
Feature differences
ESS and serverless should behave the same
API docs impact
The API docs should be automatically regenerated based on the OpenAPI spec.
Prerequisites, privileges, feature flags
No response