Cross Cluster Replication Docs missing Kibana permissions

[rashmivkulkarni]

If an user were to set up CCR he needs specific privileges - manage, manage_ccr assigned to his role. Currently that is missing in the docs. I can see how someone would only add manage_ccr and get frustrated that it isn’t working. And the error message makes it even worse.( ref bug filed: #70000 )

I took a look at the code and we are checking for manage and manage_ccr.
Related code: https://github.com/elastic/kibana/blob/master/x-pack/plugins/cross_cluster_replication/server/routes/api/cross_cluster_replication/register_permissions_route.ts#L41

Ref Kibana doc: https://www.elastic.co/guide/en/kibana/current/managing-cross-cluster-replication.html
Ref ES doc: https://www.elastic.co/guide/en/elasticsearch/reference/current/ccr-getting-started.html

Its also a chain reaction I think..Remote clusters also is dependent on CCR - and it does not have the required privs defined in Kibana. https://www.elastic.co/guide/en/kibana/current/working-remote-clusters.html

cc @debadair @gchaps @LeeDr @cuff-links

[elasticmachine]

Pinging @elastic/kibana-docs (Team:Docs)

[gchaps]

Also, add the CCR acronym to the Kibana CCR doc:

(https://www.elastic.co/guide/en/kibana/current/managing-cross-cluster-replication.html

Currently, if users search for "kibana ccr", they get results for a page about ccr and index patterns instead the one above.

[cuff-links]

Its also a chain reaction I think..Remote clusters also is dependent on CCR - and it does not have the required privs defined in Kibana. https://www.elastic.co/guide/en/kibana/current/working-remote-clusters.html

@rashmivkulkarni
While CCR does rely on Remote Clusters, Remote Clusters does not rely on CCR. Cross Cluster Replication makes it so you can replicate data from Remote Clusters to a local cluster. Remote Clusters does not have any reference to features within CCR.

[cjcenizal]

I created #76690 to clarify the required permissions and to track the changes we need to make in the code and in our docs.

[lockewritesdocs]

@rashmivkulkarni, we recently updated the CCR tutorial, which includes a link to configuring CCR user privileges as part of the prerequisites.

Given those changes, I think that we can close this ticket, unless you feel strongly otherwise.

[rashmivkulkarni]

Thanks so much for all the effort for improvising the docs and providing the doc links. Closing this ticket.