[MKI] Failing test: x-pack/test/security_solution_cypress/cypress/e2e/detection_response/rule_management/prebuilt_rules/management.cy.ts

[MadameSheema]

The spec file x-pack/test/security_solution_cypress/cypress/e2e/detection_response/rule_management/prebuilt_rules/management.cy.ts is failing in MKI environments.

The request we sent was:

Method: PUT
URL: https://kibana-cypress-security-solution-ephemeral-f6af6b5-ad83cf.es.eu-west-1.aws.qa.elastic.cloud/.kibana_security_solution/_mapping
Headers: {
"Connection": "keep-alive",
"kbn-xsrf": "cypress-creds",
"x-elastic-internal-origin": "security-solution",
"elastic-api-version": [
"2023-10-31"
],
"Content-Type": "application/json",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36",
"accept": "/",
"authorization": "Basic dGVzdGluZy1pbnRlcm5hbDozWGpCWnIwNjAzamRTSkZIYVIxNTQ5Ujg=",
"accept-encoding": "gzip, deflate",
"content-length": 16
}
Body: {"dynamic":true}

-----------------------------------------------------------

The response we got was:

Status: 403 - Forbidden
Headers: {
"content-length": "565",
"content-type": "application/json",
"elastic-api-version": "2023-10-31",
"x-cloud-request-id": "IBI5gy46Tj-lAcFYv8SiqQ",
"x-found-handling-cluster": "ad83cf5a754247a89796ee627ab64c75.es",
"x-found-handling-instance": "es-es-index-558f5c5d4f-vs48b",
"date": "Wed, 03 Apr 2024 17:38:07 GMT"
}
Body: {
"error": {
"root_cause": [
{
"type": "security_exception",
"reason": "action [indices:admin/mapping/put] is unauthorized for user [testing-internal] with effective roles [superuser] on restricted indices [.kibana_security_solution], this action is granted by the index privileges [manage,all]"
}
],
"type": "security_exception",
"reason": "action [indices:admin/mapping/put] is unauthorized for user [testing-internal] with effective roles [superuser] on restricted indices [.kibana_security_solution], this action is granted by the index privileges [manage,all]"
},
"status": 403
}

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)