From a4ca5e37e5a3f73e653637435d9e63a7ce0451f2 Mon Sep 17 00:00:00 2001
From: Joe Peeples <joe.peeples@elastic.co>
Date: Fri, 20 Sep 2024 15:00:34 -0400
Subject: [PATCH] Fix requirements statements

---
 docs/management/admin/automated-response-actions.asciidoc     | 2 +-
 .../endpoint-response-actions/automated-response-actions.mdx  | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/management/admin/automated-response-actions.asciidoc b/docs/management/admin/automated-response-actions.asciidoc
index dad567d2c7..b1ee3c0c48 100644
--- a/docs/management/admin/automated-response-actions.asciidoc
+++ b/docs/management/admin/automated-response-actions.asciidoc
@@ -13,7 +13,7 @@ Add {elastic-defend}'s <<response-actions,response actions>> to detection rules
 --
 * Automated response actions require an https://www.elastic.co/pricing[Enterprise subscription].
 * Hosts must have {agent} installed with the {elastic-defend} integration.
-* Your user role must have the ability to create detection rules and the <<endpoint-management-req,privilege>> to perform specific response actions (for example, the **Host Isolation** privilege to isolate hosts).
+* Your user role must have the ability to create detection rules and the privilege to perform <<response-action-commands,specific response actions>> (for example, the **Host Isolation** privilege to isolate hosts).
 * You can only add automated response actions to custom query rules.
 --
 
diff --git a/docs/serverless/endpoint-response-actions/automated-response-actions.mdx b/docs/serverless/endpoint-response-actions/automated-response-actions.mdx
index 2c91d21d22..b982abe1f9 100644
--- a/docs/serverless/endpoint-response-actions/automated-response-actions.mdx
+++ b/docs/serverless/endpoint-response-actions/automated-response-actions.mdx
@@ -12,9 +12,9 @@ Add ((elastic-defend))'s <DocLink slug="/serverless/security/response-actions">r
 
 <DocCallOut title="Requirements">
 
-- Automated response actions require an [Enterprise subscription](https://www.elastic.co/pricing).
+- Automated response actions require the Endpoint Protection Complete <DocLink slug="/serverless/elasticsearch/manage-project" text="project feature"/>.
 - Hosts must have ((agent)) installed with the ((elastic-defend)) integration.
-- Your user role must have the ability to create detection rules and to perform <DocLink slug="/serverless/security/response-actions" section="response-action-commands">specific response actions</DocLink>.
+- Your user role must have the ability to create detection rules and the privilege to perform <DocLink slug="/serverless/security/response-actions" section="response-action-commands">specific response actions</DocLink> (for example, custom roles require the **Host Isolation** privilege to isolate hosts).
 - You can only add automated response actions to custom query rules.
 
 </DocCallOut>