A newer version is available. Check out the latest documentation.

CNVM privilege requirements

edit

This page lists required privileges for Elastic Security’s CNVM features. There are three access levels: read, write, and manage. Each access level and its requirements are described below.

Read

edit

Users with these minimum permissions can view data on the Findings page.

Elasticsearch index privileges
edit

Read privileges for the following Elasticsearch indices:

  • logs-cloud_security_posture.vulnerabilities_latest-default
  • logs-cloud_security_posture.scores-default
Kibana privileges
edit
  • Security: Read

Write

edit

Users with these minimum permissions can view data on the Findings page and create detection rules from the findings details flyout.

Elasticsearch index privileges
edit

Read privileges for the following Elasticsearch indices:

  • logs-cloud_security_posture.vulnerabilities_latest-default
  • logs-cloud_security_posture.scores-default
Kibana privileges
edit
  • Security: All

Manage

edit

Users with these minimum permissions can view data on the Findings page, create detection rules from the findings details flyout, and install, update, or uninstall integrations and assets.

Elasticsearch index privileges
edit

Read privileges for the following Elasticsearch indices:

  • logs-cloud_security_posture.vulnerabilities_latest-default
  • logs-cloud_security_posture.scores-default
Kibana privileges
edit
  • Security: All
  • Spaces: All
  • Fleet: All
  • Integrations: All