Skip to content

Commit

Permalink
Fix requirements statements
Browse files Browse the repository at this point in the history
  • Loading branch information
joepeeples committed Sep 20, 2024
1 parent 9b556a7 commit a4ca5e3
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion docs/management/admin/automated-response-actions.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ Add {elastic-defend}'s <<response-actions,response actions>> to detection rules
--
* Automated response actions require an https://www.elastic.co/pricing[Enterprise subscription].
* Hosts must have {agent} installed with the {elastic-defend} integration.
* Your user role must have the ability to create detection rules and the <<endpoint-management-req,privilege>> to perform specific response actions (for example, the **Host Isolation** privilege to isolate hosts).
* Your user role must have the ability to create detection rules and the privilege to perform <<response-action-commands,specific response actions>> (for example, the **Host Isolation** privilege to isolate hosts).
* You can only add automated response actions to custom query rules.
--

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -12,9 +12,9 @@ Add ((elastic-defend))'s <DocLink slug="/serverless/security/response-actions">r

<DocCallOut title="Requirements">

- Automated response actions require an [Enterprise subscription](https://www.elastic.co/pricing).
- Automated response actions require the Endpoint Protection Complete <DocLink slug="/serverless/elasticsearch/manage-project" text="project feature"/>.
- Hosts must have ((agent)) installed with the ((elastic-defend)) integration.
- Your user role must have the ability to create detection rules and to perform <DocLink slug="/serverless/security/response-actions" section="response-action-commands">specific response actions</DocLink>.
- Your user role must have the ability to create detection rules and the privilege to perform <DocLink slug="/serverless/security/response-actions" section="response-action-commands">specific response actions</DocLink> (for example, custom roles require the **Host Isolation** privilege to isolate hosts).
- You can only add automated response actions to custom query rules.

</DocCallOut>
Expand Down

0 comments on commit a4ca5e3

Please sign in to comment.