diff --git a/x-pack/plugins/fleet/common/experimental_features.ts b/x-pack/plugins/fleet/common/experimental_features.ts index a12711012f307..1c47f91ea241e 100644 --- a/x-pack/plugins/fleet/common/experimental_features.ts +++ b/x-pack/plugins/fleet/common/experimental_features.ts @@ -27,7 +27,7 @@ export const allowedExperimentalValues = Object.freeze>( remoteESOutput: true, agentless: false, enableStrictKQLValidation: false, - subfeaturePrivileges: false, + subfeaturePrivileges: true, enablePackagesStateMachine: true, advancedPolicySettings: true, }); diff --git a/x-pack/plugins/fleet/server/plugin.ts b/x-pack/plugins/fleet/server/plugin.ts index aad61fd21c9ae..413a54877fefe 100644 --- a/x-pack/plugins/fleet/server/plugin.ts +++ b/x-pack/plugins/fleet/server/plugin.ts @@ -301,7 +301,8 @@ export class FleetPlugin app: [PLUGIN_ID], catalogue: ['fleet'], privilegesTooltip: i18n.translate('xpack.fleet.serverPlugin.privilegesTooltip', { - defaultMessage: 'All Spaces is required for Fleet access.', + defaultMessage: + 'All Spaces is required for Fleet access. Subfeatures privileges functionality is in technical preview and may be changed or removed completely in a future release.', }), reserved: { description: diff --git a/x-pack/test/api_integration/apis/security/privileges.ts b/x-pack/test/api_integration/apis/security/privileges.ts index 04a4177485348..029706ea58fd4 100644 --- a/x-pack/test/api_integration/apis/security/privileges.ts +++ b/x-pack/test/api_integration/apis/security/privileges.ts @@ -40,7 +40,18 @@ export default function ({ getService }: FtrProviderContext) { ], observabilityAIAssistant: ['all', 'read', 'minimal_all', 'minimal_read'], slo: ['all', 'read', 'minimal_all', 'minimal_read'], - fleetv2: ['all', 'read', 'minimal_all', 'minimal_read'], + fleetv2: [ + 'all', + 'read', + 'minimal_all', + 'minimal_read', + 'agents_all', + 'agents_read', + 'agent_policies_all', + 'agent_policies_read', + 'settings_all', + 'settings_read', + ], fleet: ['all', 'read', 'minimal_all', 'minimal_read'], actions: ['all', 'read', 'minimal_all', 'minimal_read'], stackAlerts: ['all', 'read', 'minimal_all', 'minimal_read'], diff --git a/x-pack/test/api_integration/apis/security/privileges_basic.ts b/x-pack/test/api_integration/apis/security/privileges_basic.ts index 2773adfe070e8..9c76978e5205b 100644 --- a/x-pack/test/api_integration/apis/security/privileges_basic.ts +++ b/x-pack/test/api_integration/apis/security/privileges_basic.ts @@ -116,7 +116,19 @@ export default function ({ getService }: FtrProviderContext) { ], observabilityAIAssistant: ['all', 'read', 'minimal_all', 'minimal_read'], slo: ['all', 'read', 'minimal_all', 'minimal_read'], - fleetv2: ['all', 'read', 'minimal_all', 'minimal_read'], + // fleetv2: ['all', 'read', 'minimal_all', 'minimal_read'], + fleetv2: [ + 'all', + 'read', + 'minimal_all', + 'minimal_read', + 'agents_all', + 'agents_read', + 'agent_policies_all', + 'agent_policies_read', + 'settings_all', + 'settings_read', + ], fleet: ['all', 'read', 'minimal_all', 'minimal_read'], actions: ['all', 'read', 'minimal_all', 'minimal_read'], stackAlerts: ['all', 'read', 'minimal_all', 'minimal_read'],