[BUG] Add to detections permissions documentation some Kibana rights

[111andre111]

Documentation links

We have this documentation
https://www.elastic.co/guide/en/security/8.11/detections-permissions-section.html
There could happen an error Write role required to generate data.

Description

We should add that under the roles following privilege is needed.
Kibana privileges -> Management -> Data View Management

Which documentation set(s) does this bug apply to?

ESS and serverless

Release version

No response

Testing environment

To check if the error happens without the setting.

[jpdjere]

@111andre111 Hi André,

The Write role required to generate data. message in the referenced SDH was actually caused by missing permissions in the Kibana space itself rather than on the role. See this comment for reference.

[111andre111]

Sure, but isn't this still something we should reflect in our docs?

[jmikell821]

@111andre111 we need some more information please because I'm not understanding 100%:

• The following privilege you mentioned is required to do what exactly? We specify the permission required to enable Data view here.
• An error could happen when attempting to do what...?
• You have 8.11 in the URL. Was this applicable to other versions?

[itsjustshortj]

I have recently had a customer observe behavior similar to this comment. I actually used this reference to resolve the issue. The customer is on v.8.11.3 and they were getting a Write role required to generate data: Users with write permission need to access the Elastic Security App to initialize the app source data error. They had all of the permissions set as outlined in the documentation. I had the customer set the Data View Management space permission to all and then remove the permission immediately after and the error went away; that action legitimately fixed the issue. I am not sure how it would be documented but it seems to be a recurring issue.