Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates docs for ability to unassign asset criticality #5096

Merged
merged 1 commit into from
Apr 17, 2024
Merged

Updates docs for ability to unassign asset criticality #5096

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/advanced-entity-analytics/asset-criticality.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ For example, you can assign **Extreme impact** to business-critical entities, or
[discrete]
== View and assign asset criticality

Entities do not have a default asset criticality level. You can view, assign, and change asset criticality from the following places in the {elastic-sec} app:
Entities do not have a default asset criticality level. You can view, assign, change, or unassign asset criticality from the following places in the {elastic-sec} app:

* The <<host-details-page, host details page>> and <<user-details-page, user details page>>:
+
Expand Down
20 changes: 15 additions & 5 deletions docs/getting-started/ers-req.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,11 +52,21 @@ To use the asset criticality feature, turn on the `securitySolution:enableAssetC
[discrete]
=== Privileges

* To view an entity's asset criticality, you need the `read` privilege for the `.asset-criticality.asset-criticality-<space-id>` index.

* To view, assign, or change an entity's asset criticality, you need the `read` and `write` privileges for the `.asset-criticality.asset-criticality-<space-id>` index.
To use asset criticality, you need the following privileges for the `.asset-criticality.asset-criticality-<space-id>` index:

[discrete]
=== Known limitations
[width="100%",options="header"]
|==============================================

| Action | Index privilege

| View asset criticality
| `read`

| View, assign, or change asset criticality
| `read` and `write`

| Unassign asset criticality
| `delete`

* You cannot disable asset criticality as a risk input. Once assigned, an asset criticality level can be changed but not unassigned.
|==============================================