Skip to content

Commit

Permalink
Updates docs for ability to unassign asset criticality
Browse files Browse the repository at this point in the history
  • Loading branch information
natasha-moore-elastic committed Apr 16, 2024
1 parent efe4d12 commit 3968604
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 6 deletions.
2 changes: 1 addition & 1 deletion docs/advanced-entity-analytics/asset-criticality.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ For example, you can assign **Extreme impact** to business-critical entities, or
[discrete]
== View and assign asset criticality

Entities do not have a default asset criticality level. You can view, assign, and change asset criticality from the following places in the {elastic-sec} app:
Entities do not have a default asset criticality level. You can view, assign, change, or unassign asset criticality from the following places in the {elastic-sec} app:

* The <<host-details-page, host details page>> and <<user-details-page, user details page>>:
+
Expand Down
20 changes: 15 additions & 5 deletions docs/getting-started/ers-req.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -52,11 +52,21 @@ To use the asset criticality feature, turn on the `securitySolution:enableAssetC
[discrete]
=== Privileges

* To view an entity's asset criticality, you need the `read` privilege for the `.asset-criticality.asset-criticality-<space-id>` index.

* To view, assign, or change an entity's asset criticality, you need the `read` and `write` privileges for the `.asset-criticality.asset-criticality-<space-id>` index.
To use asset criticality, you need the following privileges for the `.asset-criticality.asset-criticality-<space-id>` index:

[discrete]
=== Known limitations
[width="100%",options="header"]
|==============================================

| Action | Index privilege

| View asset criticality
| `read`

| View, assign, or change asset criticality
| `read` and `write`

| Unassign asset criticality
| `delete`

* You cannot disable asset criticality as a risk input. Once assigned, an asset criticality level can be changed but not unassigned.
|==============================================

0 comments on commit 3968604

Please sign in to comment.