elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.68k stars 8.23k forks source link

[Security Solution] [Serverless Onboarding] t1_analyst role blocked from interacting with cards due to missing integration privileges #201799

Open agusruidiazgd opened 17 hours ago

agusruidiazgd commented 17 hours ago

Describe the bug: When logging in with the t1_analyst role on Serverless, the Onboarding page incorrectly displays a callout message in the Dashboards, Alerts, and Rules cards: To add Elastic rules, add integrations first. This message appears even though the user lacks the necessary integration privileges and the integration card is not available.

Context: The t1_analyst role configuration can be found here: t1_analyst profile.

Due to the lack of privileges, the integration step is not displayed, making it impossible for the user to complete it. As a result, the user is unable to interact with the other cards (Dashboards, Rules, Alerts).

Kibana/Elasticsearch Stack version: 8.16

Steps to reproduce:

  1. Log in to Kibana Serverless using the t1_analyst role.
  2. Navigate to SecurityGet Started.
  3. Attempt to interact with the Dashboard, Rules, or Alerts cards.

Current behavior: The Dashboards, Alerts, and Rules cards display the callout: To add Elastic rules, add integrations first, preventing any further interaction.

Expected behavior: To be confirmed

Screenshots (if relevant):

https://github.com/user-attachments/assets/7c2a45fa-1fbb-4897-a01d-9fa7919f0524

elasticmachine commented 17 hours ago

Pinging @elastic/security-solution (Team: SecuritySolution)

elasticmachine commented 17 hours ago

Pinging @elastic/security-threat-hunting-explore (Team:Threat Hunting:Explore)