elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.71k stars 8.12k forks source link

[Serverless][Custom roles] Ability to reuse existing solution predefined roles as a template for a custom role creation #188888

Open YulNaumenko opened 1 month ago

YulNaumenko commented 1 month ago

In Serverless, with the custom roles available, Security Solution users will have the ability to assign Spaces to the roles and being able to manage access to the specific Elasticsearch data and assign proper Kibana privileges. But to deliver the complete UX we need to enhance custom roles creation experience with the ability to select existing (predefined) role as a template.

The historical reason why custom roles feature is needed by the Security Solution team - to provide the ability for the user to manage Spaces and the Elasticsearch data access for the Security roles/personas. Currently, to assign the Spaces to the one of the Security predefined role, the first step, user needs to recreate the role definition by copying it privileges configuration manually. Much simpler and better UX will be if user have an option to select the predefined role as a template for the custom role and modify/add only the privileges/spaces they might need. cc: @bytebilly, @azasypkin, @legrego, @MikePaquette

elasticmachine commented 1 month ago

Pinging @elastic/kibana-security (Team:Security)

legrego commented 1 month ago

Blocked on ES-8042 - Expose predefined roles via API. ES does not currently expose predefined roles via API, so Kibana has no knowledge of them today