Skip to content

[SIEM] Provide consistent messaging when user has read-only permissions #67884

@spong

Description

@spong

When a user has read-only permissions to certain pieces of functionality we have different messaging and warning/info callouts. These callouts also re-appear on each page load, which can be disruptive to read-only users and on demo deployments.

Perhaps we can standardize on the blue info callout, and persist the dismissal of the callout to local storage so it is not shown for the remainder of the user's session.

cc @MikePaquette @benskelker @EthanStrider

Detection Engine:
Banner: Warning/Yellow

Signals index permissions required You are currently missing the required permissions to update signals. Please contact your administrator for further assistance

Timeline
Banner: Warning/Yellow

You require permission to auto-save timelines within the SIEM application, though you may continue to use the timeline to search and filter security events

Case
Banner: Info/Blue

You have read-only feature privileges You are only allowed to view cases. If you need to open and update cases, contact your Kibana administrator

Metadata

Metadata

Assignees

Labels

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:SIEMenhancementNew value added to drive a business result

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions