Add "remove agent" action to the agents list

[architosch]

Describe the solution you'd like As a user, I find it inconvenient to use the cli or the api to remove agents from the system. I#d like to be able to simply click on an icon in the action column of the agents list to remove an agent from the system. This should be followed by a prompt.

Describe alternatives you've considered Since there are already alternatives (cli and api), I can't think of an alternative, since my request is only a convenience feature.

Additional context I think it's unintuitive to have this action not available in the action column.

[sempervictus]

This is a bit fraught in bigger SOC environments where analytics and operations functions are separate - don't want analysts deciding which data sources they should be handling. If this does make it to the UI, could it be set up as a config file toggle such that someone with ops rights has to enable the capability for analysts?

[architosch]

Thanks @sempervictus for this precious insight! Since I've never worked in a whole security team, I never even considered that this division might make sense.

[Desvelao]

Hi @architosch,

Thank you for the feature request!

I think it is a useful feature that we should implement in the future, but we should discuss when and how to do it.

A possible approach would be this action was available for the users with API permission to remove the agent. What do you think @architosch and @sempervictus?

[architosch]

HI @Desvelao,

I think your suggestion (limiting the availability of this action to users with API permissions) is the perfect middle ground between total division and total inclusion. 👍