Skip to content

Commit 69a1924

Browse files
[DOCS] Update security prereqs for delete async EQL API (#75091) (#75229)
Co-authored-by: James Rodewig <40268737+jrodewig@users.noreply.github.com>
1 parent 432e0cd commit 69a1924

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

docs/reference/eql/delete-async-eql-search-api.asciidoc

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,8 +25,11 @@ DELETE /_eql/search/FkpMRkJGS1gzVDRlM3g4ZzMyRGlLbkEaTXlJZHdNT09TU2VTZVBoNDM3cFZM
2525
[[delete-async-eql-search-api-prereqs]]
2626
==== {api-prereq-title}
2727

28-
* If the {es} {security-features} are enabled, only the user who first submitted
29-
the EQL search can delete the search using this API.
28+
* If the {es} {security-features} are enabled, only the following users can
29+
use this API to delete a search:
30+
31+
** Users with the `cancel_task` <<privileges-list-cluster,cluster privilege>>
32+
** The user who first submitted the search
3033

3134
* See <<eql-required-fields>>.
3235

0 commit comments

Comments
 (0)