[Security solution] Update serverless roles to include Data Views fea… (

#169036) …ture permissions ## Summary Align roles with project-controller
elastic · Oct 17, 2023 · 4113d25 · 4113d25
1 parent 36fcdc7
commit 4113d25
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/packages/kbn-es/src/serverless_resources/roles.yml b/packages/kbn-es/src/serverless_resources/roles.yml
@@ -387,6 +387,7 @@ soc_manager:
         - feature_actions.all
         - feature_builtInAlerts.all
         - feature_osquery.all
+        - feature_indexPatterns.all # Detections Data Views
       resources: "*"
 
 detections_admin:
@@ -471,6 +472,7 @@ platform_engineer:
         - feature_fleet.all
         - feature_fleetv2.all
         - feature_osquery.all
+        - feature_indexPatterns.all # Detections Data Views
       resources: "*"
 
 endpoint_operations_analyst:

diff --git a/...gins/security_solution/scripts/endpoint/common/roles_users/endpoint_operations_analyst.ts b/...gins/security_solution/scripts/endpoint/common/roles_users/endpoint_operations_analyst.ts
@@ -36,7 +36,6 @@ export const getEndpointOperationsAnalyst: () => Omit<Role, 'name'> = () => {
         },
         {
           names: [
-            'names:',
             '.alerts-security*',
             '.siem-signals-*',
             '.preview.alerts-security*',

diff --git a/...solution/scripts/endpoint/common/roles_users/serverless/es_serverless_resources/roles.yml b/...solution/scripts/endpoint/common/roles_users/serverless/es_serverless_resources/roles.yml
@@ -390,6 +390,7 @@ soc_manager:
         - feature_actions.all
         - feature_builtInAlerts.all
         - feature_osquery.all
+        - feature_indexPatterns.all # Detections Data Views
       resources: "*"
 
 detections_admin:
@@ -474,6 +475,7 @@ platform_engineer:
         - feature_fleet.all
         - feature_fleetv2.all
         - feature_osquery.all
+        - feature_indexPatterns.all # Detections Data Views
       resources: "*"
 
 endpoint_operations_analyst: