diff --git a/docs/advanced-entity-analytics/asset-criticality.asciidoc b/docs/advanced-entity-analytics/asset-criticality.asciidoc index 7009251dc7..65d51a4f0c 100644 --- a/docs/advanced-entity-analytics/asset-criticality.asciidoc +++ b/docs/advanced-entity-analytics/asset-criticality.asciidoc @@ -26,7 +26,7 @@ For example, you can assign **Extreme impact** to business-critical entities, or [discrete] == View and assign asset criticality -Entities do not have a default asset criticality level. You can view, assign, and change asset criticality from the following places in the {elastic-sec} app: +Entities do not have a default asset criticality level. You can view, assign, change, or unassign asset criticality from the following places in the {elastic-sec} app: * The <> and <>: + diff --git a/docs/getting-started/ers-req.asciidoc b/docs/getting-started/ers-req.asciidoc index 141e4f9879..c3af18e1e5 100644 --- a/docs/getting-started/ers-req.asciidoc +++ b/docs/getting-started/ers-req.asciidoc @@ -52,11 +52,21 @@ To use the asset criticality feature, turn on the `securitySolution:enableAssetC [discrete] === Privileges -* To view an entity's asset criticality, you need the `read` privilege for the `.asset-criticality.asset-criticality-` index. - -* To view, assign, or change an entity's asset criticality, you need the `read` and `write` privileges for the `.asset-criticality.asset-criticality-` index. +To use asset criticality, you need the following privileges for the `.asset-criticality.asset-criticality-` index: [discrete] -=== Known limitations +[width="100%",options="header"] +|============================================== + +| Action | Index privilege + +| View asset criticality +| `read` + +| View, assign, or change asset criticality +| `read` and `write` + +| Unassign asset criticality +| `delete` -* You cannot disable asset criticality as a risk input. Once assigned, an asset criticality level can be changed but not unassigned. \ No newline at end of file +|============================================== \ No newline at end of file