diff --git a/docs/release-notes/breaking-changes.md b/docs/release-notes/breaking-changes.md index 2458f4aee425a..043d475af1c1b 100644 --- a/docs/release-notes/breaking-changes.md +++ b/docs/release-notes/breaking-changes.md @@ -39,7 +39,7 @@ If you are migrating from a version prior to version 9.0, you must first upgrade ## 9.2.0 [kibana-9.2.0-breaking-changes] $$$kibana-230067$$$ ::::{dropdown} Improved advanced settings management APIs privilege checks -% **Details**
Roles with explicit `read` access to advanced settings but `all` access to `SavedObjectManagement` can no longer update settings using the internal advanced settings API. This update enforces explicit privileges instead of relying on saved object security checks. +**Details**
Roles with explicit `read` access to advanced settings but `all` access to `SavedObjectManagement` can no longer update settings using the internal advanced settings API. This update enforces explicit privileges instead of relying on saved object security checks. View [#230067]({{kib-pull}}230067). :::: @@ -47,11 +47,21 @@ View [#230067]({{kib-pull}}230067). $$$kibana-213916$$$ ::::{dropdown} Change to variable syntax in {{esql}} queries -% **Details**
Fields and functions variables are now described with `??` in {{esql}} queries. For value variables, you can continue to use `?`. +**Details**
Fields and functions variables are now described with `??` in {{esql}} queries. For value variables, you can continue to use `?`. View [#213916]({{kib-pull}}213916). :::: +$$$kibana-216558$$$ +::::{dropdown} API keys are used for authenticating report generation requests + +**Details**
In 9.1.0, API keys are used for authenticating report generation requests, instead of session cookies that are based on user credentials. + +If you have a cross-cluster search environment and want to generate reports from remote clusters, you must have the appropriate cluster and index privileges on the remote cluster and local cluster. For example, if requests are authenticated with an API key, the API key requires certain privileges on the local cluster that contains the local index, instead of the remote. For more information and examples, refer to [Configure roles and users for remote clusters](docs-content://deploy-manage/remote-clusters/remote-clusters-cert.md#remote-clusters-privileges-cert). + +View [#216558]({{kib-pull}}216558). +:::: + ## 9.0.0 [kibana-900-breaking-changes] $$$kibana-193792$$$ :::{dropdown} Access to {{kib}}'s internal APIs is blocked