[Security][9.1] Security roles siemV3 migration for Global Artifact Management
#219566
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -23,17 +23,33 @@ xpack.features.overrides: | |
| securitySolutionNotes.hidden: true | ||
| siem.description: null | ||
| siemV2.description: null | ||
| siemV3.description: null | ||
| securitySolutionSiemMigrations.hidden: true | ||
|
|
||
| ## Fine-tune the security solution essentials feature privileges. These feature privilege overrides are set individually for each project type. Also, refer to `serverless.yml` for the project-agnostic overrides. | ||
| siemV3: | ||
| privileges: | ||
| all.composedOf: | ||
| ## Limited values so the fields from serverless.yml or serverless.security.yml are overwritten | ||
| ## We do not need to compose siemV3 from maps and visualizations because these functionalities are disabled in this tier | ||
|
Contributor
There was a problem hiding this comment. question: Looking at this config, I don't see maps or visualizations being disabled. Is this statement still accurate (
Contributor
Author
There was a problem hiding this comment. @tomsonpl, @ashokaditya, could you jump in please?
Contributor
There was a problem hiding this comment. @azasypkin your assumption is correct, we reverted the disable maps, visualizations etc in config's change.
Contributor
There was a problem hiding this comment. Sorry, additional part: the RBAC is also hidden, so the current logic seems fine @gergoabraham
Contributor
There was a problem hiding this comment. Roger that, just to make sure I understand - we switched to
Contributor
There was a problem hiding this comment. In the end the team notices that we need to use some |
||
| - feature: "discover_v2" | ||
| privileges: [ "all" ] | ||
| ## We need limited access to fleet (v1) in order to use integrations | ||
| - feature: "fleet" | ||
| privileges: [ "all" ] | ||
| read.composedOf: | ||
| - feature: "discover_v2" | ||
| privileges: [ "read" ] | ||
| - feature: "fleet" | ||
| privileges: [ "read" ] | ||
| siemV2: | ||
| privileges: | ||
| all.composedOf: | ||
| ## Limited values so the fields from serverless.yml or serverless.security.yml are overwritten | ||
| ## We do not need to compose siemV2 from maps and visualizations because these functionalities are disabled in this tier | ||
| - feature: "discover_v2" | ||
| privileges: [ "all" ] | ||
| ## We need limited access to fleet (v1) in order to use integrations | ||
| - feature: "fleet" | ||
| privileges: [ "all" ] | ||
| read.composedOf: | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: I believe
descriptionis only used in the role management UI to describe a feature. The UI shows only the latest feature version, so you could clean up this config a bit by removing entries for deprecated features and leaving only v3.