From b1906552915acb2051916e84f98e81bd96b93206 Mon Sep 17 00:00:00 2001 From: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com> Date: Wed, 17 Apr 2024 11:02:06 +0100 Subject: [PATCH] Updates docs for ability to unassign asset criticality (#5096) --- .../asset-criticality.asciidoc | 2 +- docs/getting-started/ers-req.asciidoc | 20 ++++++++++++++----- 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/docs/advanced-entity-analytics/asset-criticality.asciidoc b/docs/advanced-entity-analytics/asset-criticality.asciidoc index 7009251dc7..65d51a4f0c 100644 --- a/docs/advanced-entity-analytics/asset-criticality.asciidoc +++ b/docs/advanced-entity-analytics/asset-criticality.asciidoc @@ -26,7 +26,7 @@ For example, you can assign **Extreme impact** to business-critical entities, or [discrete] == View and assign asset criticality -Entities do not have a default asset criticality level. You can view, assign, and change asset criticality from the following places in the {elastic-sec} app: +Entities do not have a default asset criticality level. You can view, assign, change, or unassign asset criticality from the following places in the {elastic-sec} app: * The <> and <>: + diff --git a/docs/getting-started/ers-req.asciidoc b/docs/getting-started/ers-req.asciidoc index 141e4f9879..c3af18e1e5 100644 --- a/docs/getting-started/ers-req.asciidoc +++ b/docs/getting-started/ers-req.asciidoc @@ -52,11 +52,21 @@ To use the asset criticality feature, turn on the `securitySolution:enableAssetC [discrete] === Privileges -* To view an entity's asset criticality, you need the `read` privilege for the `.asset-criticality.asset-criticality-` index. - -* To view, assign, or change an entity's asset criticality, you need the `read` and `write` privileges for the `.asset-criticality.asset-criticality-` index. +To use asset criticality, you need the following privileges for the `.asset-criticality.asset-criticality-` index: [discrete] -=== Known limitations +[width="100%",options="header"] +|============================================== + +| Action | Index privilege + +| View asset criticality +| `read` + +| View, assign, or change asset criticality +| `read` and `write` + +| Unassign asset criticality +| `delete` -* You cannot disable asset criticality as a risk input. Once assigned, an asset criticality level can be changed but not unassigned. \ No newline at end of file +|============================================== \ No newline at end of file