How to smoothly replace deprecated reporting_user by Kibana Feature privileges?

Hi all,

we want to get rid of the deprecated reporting_user and wonder how to do that smoothly.

We have already found out that as a replacement one can use Kibana Feature Privileges which are available in the UI when setting xpack.reporting.roles.enabled: false in kibana.yml.

Our observation when setting xpack.reporting.roles.enabled: false was, that ONLY Kibana feature privileges work. The reporting_user role becomes "inactive", meaning it is still there but does not actually grant reporting privileges.

So basically, we see no way to migrate to the new kibana feature privileges without any disruption. We first have to set xpack.reporting.roles.enabled: true to be able to create the new role. But as soon as having done that, the old role won't work anymore and users won't be able to create reports until we will configure and assign the new role.

This is not a dealbreaker, but we would like to confirm that there really is no better / seamless way to migrate away from the reporting_user?

Version: Elasticsearch 7.16
License: Enterprise

Thank you very much!

Bianca

Anyone any idea? :slightly_smiling_face: