diff --git a/output/openapi/elasticsearch-serverless-openapi.json b/output/openapi/elasticsearch-serverless-openapi.json
index 149cf6f3e4..e36fc35899 100644
--- a/output/openapi/elasticsearch-serverless-openapi.json
+++ b/output/openapi/elasticsearch-serverless-openapi.json
@@ -57155,21 +57155,24 @@
       "security._types:IndexPrivilege": {
         "type": "string",
         "enum": [
-          "none",
           "all",
           "auto_configure",
           "create",
           "create_doc",
           "create_index",
+          "cross_cluster_replication",
+          "cross_cluster_replication_internal",
           "delete",
           "delete_index",
           "index",
           "maintenance",
           "manage",
+          "manage_data_stream_lifecycle",
           "manage_follow_index",
           "manage_ilm",
           "manage_leader_index",
           "monitor",
+          "none",
           "read",
           "read_cross_cluster",
           "view_index_metadata",
@@ -57372,13 +57375,21 @@
           "all",
           "cancel_task",
           "create_snapshot",
+          "cross_cluster_replication",
+          "cross_cluster_search",
+          "delegate_pki",
           "grant_api_key",
           "manage",
           "manage_api_key",
+          "manage_autoscaling",
+          "manage_behavioral_analytics",
           "manage_ccr",
+          "manage_data_frame_transforms",
+          "manage_data_stream_global_retention",
           "manage_enrich",
           "manage_ilm",
           "manage_index_templates",
+          "manage_inference",
           "manage_ingest_pipelines",
           "manage_logstash_pipelines",
           "manage_ml",
@@ -57387,6 +57398,9 @@
           "manage_pipeline",
           "manage_rollup",
           "manage_saml",
+          "manage_search_application",
+          "manage_search_query_rules",
+          "manage_search_synonyms",
           "manage_security",
           "manage_service_account",
           "manage_slm",
@@ -57395,17 +57409,28 @@
           "manage_user_profile",
           "manage_watcher",
           "monitor",
+          "monitor_data_frame_transforms",
+          "monitor_data_stream_global_retention",
+          "monitor_enrich",
+          "monitor_inference",
           "monitor_ml",
           "monitor_rollup",
           "monitor_snapshot",
           "monitor_text_structure",
           "monitor_transform",
           "monitor_watcher",
+          "none",
+          "post_behavioral_analytics_event",
           "read_ccr",
+          "read_connector_secrets",
+          "read_fleet_secrets",
           "read_ilm",
           "read_pipeline",
+          "read_security",
           "read_slm",
-          "transport_client"
+          "transport_client",
+          "write_connector_secrets",
+          "write_fleet_secrets"
         ]
       },
       "security.has_privileges:IndexPrivilegesCheck": {
diff --git a/output/schema/schema.json b/output/schema/schema.json
index a159957867..5fbba3763a 100644
--- a/output/schema/schema.json
+++ b/output/schema/schema.json
@@ -172098,7 +172098,7 @@
           }
         }
       ],
-      "specLocation": "security/_types/Privileges.ts#L193-L195"
+      "specLocation": "security/_types/Privileges.ts#L218-L220"
     },
     {
       "kind": "interface",
@@ -172186,6 +172186,15 @@
         {
           "name": "create_snapshot"
         },
+        {
+          "name": "cross_cluster_replication"
+        },
+        {
+          "name": "cross_cluster_search"
+        },
+        {
+          "name": "delegate_pki"
+        },
         {
           "name": "grant_api_key"
         },
@@ -172195,9 +172204,21 @@
         {
           "name": "manage_api_key"
         },
+        {
+          "name": "manage_autoscaling"
+        },
+        {
+          "name": "manage_behavioral_analytics"
+        },
         {
           "name": "manage_ccr"
         },
+        {
+          "name": "manage_data_frame_transforms"
+        },
+        {
+          "name": "manage_data_stream_global_retention"
+        },
         {
           "name": "manage_enrich"
         },
@@ -172207,6 +172228,9 @@
         {
           "name": "manage_index_templates"
         },
+        {
+          "name": "manage_inference"
+        },
         {
           "name": "manage_ingest_pipelines"
         },
@@ -172231,6 +172255,15 @@
         {
           "name": "manage_saml"
         },
+        {
+          "name": "manage_search_application"
+        },
+        {
+          "name": "manage_search_query_rules"
+        },
+        {
+          "name": "manage_search_synonyms"
+        },
         {
           "name": "manage_security"
         },
@@ -172255,6 +172288,18 @@
         {
           "name": "monitor"
         },
+        {
+          "name": "monitor_data_frame_transforms"
+        },
+        {
+          "name": "monitor_data_stream_global_retention"
+        },
+        {
+          "name": "monitor_enrich"
+        },
+        {
+          "name": "monitor_inference"
+        },
         {
           "name": "monitor_ml"
         },
@@ -172273,27 +172318,48 @@
         {
           "name": "monitor_watcher"
         },
+        {
+          "name": "none"
+        },
+        {
+          "name": "post_behavioral_analytics_event"
+        },
         {
           "name": "read_ccr"
         },
+        {
+          "name": "read_connector_secrets"
+        },
+        {
+          "name": "read_fleet_secrets"
+        },
         {
           "name": "read_ilm"
         },
         {
           "name": "read_pipeline"
         },
+        {
+          "name": "read_security"
+        },
         {
           "name": "read_slm"
         },
         {
           "name": "transport_client"
+        },
+        {
+          "name": "write_connector_secrets"
+        },
+        {
+          "name": "write_fleet_secrets"
         }
       ],
       "name": {
         "name": "ClusterPrivilege",
         "namespace": "security._types"
       },
-      "specLocation": "security/_types/Privileges.ts#L41-L80"
+      "specLocation": "security/_types/Privileges.ts#L41-L102"
     },
     {
       "kind": "interface",
@@ -172414,7 +172480,7 @@
           }
         }
       ],
-      "specLocation": "security/_types/Privileges.ts#L189-L191"
+      "specLocation": "security/_types/Privileges.ts#L214-L216"
     },
     {
       "kind": "enum",
@@ -172438,9 +172504,6 @@
       "isOpen": true,
       "kind": "enum",
       "members": [
-        {
-          "name": "none"
-        },
         {
           "name": "all"
         },
@@ -172456,6 +172519,12 @@
         {
           "name": "create_index"
         },
+        {
+          "name": "cross_cluster_replication"
+        },
+        {
+          "name": "cross_cluster_replication_internal"
+        },
         {
           "name": "delete"
         },
@@ -172471,6 +172540,9 @@
         {
           "name": "manage"
         },
+        {
+          "name": "manage_data_stream_lifecycle"
+        },
         {
           "name": "manage_follow_index"
         },
@@ -172483,6 +172555,9 @@
         {
           "name": "monitor"
         },
+        {
+          "name": "none"
+        },
         {
           "name": "read"
         },
@@ -172500,7 +172575,7 @@
         "name": "IndexPrivilege",
         "namespace": "security._types"
       },
-      "specLocation": "security/_types/Privileges.ts#L166-L187"
+      "specLocation": "security/_types/Privileges.ts#L188-L212"
     },
     {
       "kind": "interface",
@@ -172576,7 +172651,7 @@
           }
         }
       ],
-      "specLocation": "security/_types/Privileges.ts#L82-L105"
+      "specLocation": "security/_types/Privileges.ts#L104-L127"
     },
     {
       "codegenNames": [
@@ -172590,7 +172665,7 @@
         "name": "IndicesPrivilegesQuery",
         "namespace": "security._types"
       },
-      "specLocation": "security/_types/Privileges.ts#L131-L139",
+      "specLocation": "security/_types/Privileges.ts#L153-L161",
       "type": {
         "items": [
           {
@@ -172640,7 +172715,7 @@
           }
         }
       ],
-      "specLocation": "security/_types/Privileges.ts#L197-L199"
+      "specLocation": "security/_types/Privileges.ts#L222-L224"
     },
     {
       "kind": "interface",
@@ -173134,7 +173209,7 @@
         "name": "RoleTemplateInlineQuery",
         "namespace": "security._types"
       },
-      "specLocation": "security/_types/Privileges.ts#L160-L161",
+      "specLocation": "security/_types/Privileges.ts#L182-L183",
       "type": {
         "items": [
           {
@@ -173214,7 +173289,7 @@
         }
       ],
       "shortcutProperty": "source",
-      "specLocation": "security/_types/Privileges.ts#L153-L158"
+      "specLocation": "security/_types/Privileges.ts#L175-L180"
     },
     {
       "kind": "interface",
@@ -173238,7 +173313,7 @@
           }
         }
       ],
-      "specLocation": "security/_types/Privileges.ts#L141-L151"
+      "specLocation": "security/_types/Privileges.ts#L163-L173"
     },
     {
       "codegenNames": [
@@ -173250,7 +173325,7 @@
         "name": "RoleTemplateScript",
         "namespace": "security._types"
       },
-      "specLocation": "security/_types/Privileges.ts#L163-L164",
+      "specLocation": "security/_types/Privileges.ts#L185-L186",
       "type": {
         "items": [
           {
@@ -173480,7 +173555,7 @@
           }
         }
       ],
-      "specLocation": "security/_types/Privileges.ts#L107-L129"
+      "specLocation": "security/_types/Privileges.ts#L129-L151"
     },
     {
       "kind": "interface",
diff --git a/output/typescript/types.ts b/output/typescript/types.ts
index d13d7e7624..8ecd148269 100644
--- a/output/typescript/types.ts
+++ b/output/typescript/types.ts
@@ -16159,7 +16159,7 @@ export interface SecurityClusterNode {
   name: Name
 }
 
-export type SecurityClusterPrivilege = 'all' | 'cancel_task' | 'create_snapshot' | 'grant_api_key' | 'manage' | 'manage_api_key' | 'manage_ccr' | 'manage_enrich' | 'manage_ilm' | 'manage_index_templates' | 'manage_ingest_pipelines' | 'manage_logstash_pipelines' | 'manage_ml' | 'manage_oidc' | 'manage_own_api_key' | 'manage_pipeline' | 'manage_rollup' | 'manage_saml' | 'manage_security' | 'manage_service_account' | 'manage_slm' | 'manage_token' | 'manage_transform' | 'manage_user_profile' | 'manage_watcher' | 'monitor' | 'monitor_ml' | 'monitor_rollup' | 'monitor_snapshot' | 'monitor_text_structure' | 'monitor_transform' | 'monitor_watcher' | 'read_ccr' | 'read_ilm' | 'read_pipeline' | 'read_slm' | 'transport_client'| string
+export type SecurityClusterPrivilege = 'all' | 'cancel_task' | 'create_snapshot' | 'cross_cluster_replication' | 'cross_cluster_search' | 'delegate_pki' | 'grant_api_key' | 'manage' | 'manage_api_key' | 'manage_autoscaling' | 'manage_behavioral_analytics' | 'manage_ccr' | 'manage_data_frame_transforms' | 'manage_data_stream_global_retention' | 'manage_enrich' | 'manage_ilm' | 'manage_index_templates' | 'manage_inference' | 'manage_ingest_pipelines' | 'manage_logstash_pipelines' | 'manage_ml' | 'manage_oidc' | 'manage_own_api_key' | 'manage_pipeline' | 'manage_rollup' | 'manage_saml' | 'manage_search_application' | 'manage_search_query_rules' | 'manage_search_synonyms' | 'manage_security' | 'manage_service_account' | 'manage_slm' | 'manage_token' | 'manage_transform' | 'manage_user_profile' | 'manage_watcher' | 'monitor' | 'monitor_data_frame_transforms' | 'monitor_data_stream_global_retention' | 'monitor_enrich' | 'monitor_inference' | 'monitor_ml' | 'monitor_rollup' | 'monitor_snapshot' | 'monitor_text_structure' | 'monitor_transform' | 'monitor_watcher' | 'none' | 'post_behavioral_analytics_event' | 'read_ccr' | 'read_connector_secrets' | 'read_fleet_secrets' | 'read_ilm' | 'read_pipeline' | 'read_security' | 'read_slm' | 'transport_client' | 'write_connector_secrets' | 'write_fleet_secrets'| string
 
 export interface SecurityCreatedStatus {
   created: boolean
@@ -16182,7 +16182,7 @@ export interface SecurityGlobalPrivilege {
 
 export type SecurityGrantType = 'password' | 'access_token'
 
-export type SecurityIndexPrivilege = 'none' | 'all' | 'auto_configure' | 'create' | 'create_doc' | 'create_index' | 'delete' | 'delete_index' | 'index' | 'maintenance' | 'manage' | 'manage_follow_index' | 'manage_ilm' | 'manage_leader_index' | 'monitor' | 'read' | 'read_cross_cluster' | 'view_index_metadata' | 'write'| string
+export type SecurityIndexPrivilege = 'all' | 'auto_configure' | 'create' | 'create_doc' | 'create_index' | 'cross_cluster_replication' | 'cross_cluster_replication_internal' | 'delete' | 'delete_index' | 'index' | 'maintenance' | 'manage' | 'manage_data_stream_lifecycle' | 'manage_follow_index' | 'manage_ilm' | 'manage_leader_index' | 'monitor' | 'none' | 'read' | 'read_cross_cluster' | 'view_index_metadata' | 'write'| string
 
 export interface SecurityIndicesPrivileges {
   field_security?: SecurityFieldSecurity
diff --git a/specification/security/_types/Privileges.ts b/specification/security/_types/Privileges.ts
index 844abedbfc..b574a9c7e1 100644
--- a/specification/security/_types/Privileges.ts
+++ b/specification/security/_types/Privileges.ts
@@ -43,10 +43,16 @@ export enum ClusterPrivilege {
   all,
   cancel_task,
   create_snapshot,
+  cross_cluster_replication,
+  cross_cluster_search,
+  delegate_pki,
   grant_api_key,
   manage,
   manage_api_key,
+  manage_autoscaling,
+  manage_behavioral_analytics,
   manage_ccr,
+  manage_data_frame_transforms,
   manage_enrich,
   manage_ilm,
   manage_index_templates,
@@ -58,6 +64,9 @@ export enum ClusterPrivilege {
   manage_pipeline,
   manage_rollup,
   manage_saml,
+  manage_search_application,
+  manage_search_query_rules,
+  manage_search_synonyms,
   manage_security,
   manage_service_account,
   manage_slm,
@@ -66,17 +75,26 @@ export enum ClusterPrivilege {
   manage_user_profile,
   manage_watcher,
   monitor,
+  monitor_data_frame_transforms,
+  monitor_enrich,
   monitor_ml,
   monitor_rollup,
   monitor_snapshot,
   monitor_text_structure,
   monitor_transform,
   monitor_watcher,
+  none,
+  post_behavioral_analytics_event,
   read_ccr,
+  read_connector_secrets,
+  read_fleet_secrets,
   read_ilm,
   read_pipeline,
+  read_security,
   read_slm,
-  transport_client
+  transport_client,
+  write_connector_secrets,
+  write_fleet_secrets
 }
 
 export class IndicesPrivileges {
@@ -165,21 +183,24 @@ export type RoleTemplateScript = RoleTemplateInlineScript | StoredScriptId
 
 /** @non_exhaustive */
 export enum IndexPrivilege {
-  none,
   all,
   auto_configure,
   create,
   create_doc,
   create_index,
+  cross_cluster_replication,
+  cross_cluster_replication_internal,
   delete,
   delete_index,
   index,
   maintenance,
   manage,
+  manage_data_stream_lifecycle,
   manage_follow_index,
   manage_ilm,
   manage_leader_index,
   monitor,
+  none,
   read,
   read_cross_cluster,
   view_index_metadata,