[DOCS]: Update related integration documentation for RBAC and Definition #3035
Labels
Effort: Large
Issues that require significant planning, research, writing, and testing
Feature: Rules
Priority: Medium
Issues that have relevance, but aren't urgent
Team: Detections/Response
Detections and Response
Team: Docs
Description
We can do a better job to describe the related integrations feature helping the customer better what it goes
Acceptance Test Criteria
At the end I'd like to see some screenshots from the feature as well as especially what the enabled/configured numbers mean and what are the required privileges what is needed as of RBAC point of view.
Notes
I think the most important answers are hidden in these 2 comments:
#2015 (comment)
#2015 (comment)
As of the required privileges these would be like:
Maybe we could refer to that here:
https://www.elastic.co/guide/en/security/master/rules-ui-management.html#rule-prerequisites
When it comes to the number of integrations we should describe what is the meaning
https://www.elastic.co/guide/en/security/master/rules-ui-management.html#rules-ui-management
Maybe we could invent a separate Anchor point for related integrations describing a bit what it means exactly.
:
When it comes to our API documentation we expose already the fields
related_integrations
andrequired_fields
:https://www.elastic.co/guide/en/security/master/rules-api-create.html#_response_payload
https://www.elastic.co/guide/en/security/master/rules-api-get.html#_response_payload_2
https://www.elastic.co/guide/en/security/master/rules-api-find.html#_response_payload_3
https://www.elastic.co/guide/en/security/master/rules-api-update.html#_response_payload_4
However is there any need to hide the content of these fields how these could as of today look like from a content perspective?
The text was updated successfully, but these errors were encountered: