From 6dc6f7911296eaab4764e5b4fb489db9b39a250d Mon Sep 17 00:00:00 2001
From: Julia Bardi <julia.bardi@elastic.co>
Date: Tue, 24 Jun 2025 14:37:27 +0200
Subject: [PATCH] manage_ccr privilege to kibana_system

---
 .../authz/store/KibanaOwnedReservedRoleDescriptors.java         | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
index 38b78ad357bf5..d851cdb8893f6 100644
--- a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
+++ b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
@@ -80,6 +80,8 @@ static RoleDescriptor kibanaSystem(String name) {
                 // For Fleet package upgrade
                 "manage_pipeline",
                 "manage_ilm",
+                // For Fleet sync integrations feature
+                "manage_ccr",
                 // For connectors telemetry
                 "monitor_connector",
                 // For the endpoint package that ships a transform