CNVM privilege requirements
Elastic Stack Serverless Security
This page lists required privileges for Elastic Security's CNVM features. There are three access levels: read, write, and manage. Each access level and its requirements are described below.
Users with these minimum permissions can view data on the Findings page.
Read privileges for the following Elasticsearch indices:
logs-cloud_security_posture.vulnerabilities_latest-defaultlogs-cloud_security_posture.scores-default
Security: Read
Users with these minimum permissions can view data on the Findings page and create detection rules from the findings details flyout.
Read privileges for the following Elasticsearch indices:
logs-cloud_security_posture.vulnerabilities_latest-defaultlogs-cloud_security_posture.scores-default
Security: All
Users with these minimum permissions can view data on the Findings page, create detection rules from the findings details flyout, and install, update, or uninstall integrations and assets.
Read privileges for the following Elasticsearch indices:
logs-cloud_security_posture.vulnerabilities_latest-defaultlogs-cloud_security_posture.scores-default
Security: AllSpaces: AllFleet: AllIntegrations: All