[Watcher] Improve document around security privileges 

The [watcher UI docs](https://www.elastic.co/guide/en/kibana/current/watcher-ui.html#watcher-security) should be updated to clarify the security privileges necessary to use watcher UI.

In addition to the `manage_watcher` or `monitor_watcher` cluster privilege, the user must also have `read` access to `.watches` and `.watcher-history-*` indices.

Related privileges code: https://github.com/elastic/kibana/blob/e297fec23ed46bc87d9c6ed676f42e378bdfdc32/x-pack/plugins/watcher/server/plugin.ts#L50-L74

	features.registerElasticsearchFeature({
	id: 'watcher',
	management: {
	insightsAndAlerting: ['watcher'],
	},
	catalogue: ['watcher'],
	privileges: [
	{
	requiredClusterPrivileges: ['manage_watcher'],
	requiredIndexPrivileges: {
	[INDEX_NAMES.WATCHES]: ['read'],
	[INDEX_NAMES.WATCHER_HISTORY]: ['read'],
	},
	ui: [],
	},
	{
	requiredClusterPrivileges: ['monitor_watcher'],
	requiredIndexPrivileges: {
	[INDEX_NAMES.WATCHES]: ['read'],
	[INDEX_NAMES.WATCHER_HISTORY]: ['read'],
	},
	ui: [],
	},
	],
	});

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Watcher] Improve document around security privileges #101291

alisonelizabeth
openedon Jun 3, 2021

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[Watcher] Improve document around security privileges #101291

Description

alisonelizabethopenedon Jun 3, 2021

Metadata