Additional permissions on Transforms for Kibana System to SLOs and Entities OOTB

[grabowskit]

Description

Need additional permissions options for Transforms for creating SLOs and Entities. Currently the only Transforms permission options require system users to have full permissions.

In order for a system user, like kibana_system, to create a transform without user involvement, they would need the following permissions:

• transform_admin built-in role or manage_transform cluster privileges,
• read and view_index_metadata index privileges on source indices, (e.g. logs-*) and
• create_index, index, manage, and read index privileges on destination indices. If a retention_policy is configured, delete index privilege is also required on the destination index.

Want to have a discussion with Platform - ES Transforms team to discuss options cc: @simianhacker @vinaychandrasekhar @tommyers-elastic

[mark-vieira]

Is this different than https://github.com/elastic/elasticsearch/issues/111603?

[elasticsearchmachine]

Pinging @elastic/es-security (Team:Security)