[ML] Adds an `AI` section into `Stack Management` #227289

rbrtj · 2025-07-09T16:16:05Z

Resolves: #224922
This PR:

Introduces a new AI section in Stack Management
Moves all AI Assistant management pages out of the Kibana section into the new AI setion.
Introduces the genAISettings plugin with a GenAI Settings page under the new AI section to manage generic configurations like connectors and feature visibility.
~~AI Assistants settings now depend on the aiAssistantManagementSelection setting instead of the availability of individual assistants.~~
~~Enabled read mode for Security and Observability/Search assistant settings based on the setting above ^~~

It appears that the Assistant settings cannot directly rely on the AI Assistant Settings privilege. There are still ongoing discussions about whether we should remove the AI Assistant Settings privilege or take a different approach. With that in mind, I reverted some changes in this PR to just create a new section and move AI Assistants under it, along with adding the new GenAI Settings page. I left the existing privileges checks as they are, they will be updated once the discussions are resolved.

`AI Assistants` scenarios with different privileges:

Management > AI Assistant Settings - All/Read
Security Assistant and Observability Assistant - All

Management > AI Assistant Settings - All/Read,
Security Assistant and Observability Assistant - none

Management > AI Assistant Settings - None

No Enterprise license.
Currently buggy, will be fixed by [Obs AI Assistant] Remove assistant settings page for basic licenses #230036

TBD:

Manage Connectors should apply filters, however, the connectors page does not currently save filters in the URL state.
In solution views, take the user directly to the individual Assistant settings - I've decided to hold off on this until the ongoing privilege discussions are resolved, as the implementation may vary depending on the outcome.

rbrtj · 2025-07-09T16:16:23Z

/ci

…lection under Kibana section

…ure visibility under GenAI Settings

…-settings

…ces list

…t --include-path /api/status --include-path /api/alerting/rule/ --include-path /api/alerting/rules --include-path /api/actions --include-path /api/security/role --include-path /api/spaces --include-path /api/streams --include-path /api/fleet --include-path /api/dashboards --include-path /api/saved_objects/_import --include-path /api/saved_objects/_export --include-path /api/maintenance_window --update'

github-actions · 2025-07-17T12:50:10Z

🔍 Preview links for changed docs

docs/extend/plugin-list.md

peteharverson · 2025-08-06T14:23:57Z

...kages/shared/kbn-elastic-assistant/impl/assistant/settings/assistant_settings_management.tsx

+              onClick={() => navigateToApp('management', { path: 'ai/genAiSettings' })}
+              data-test-subj="genAiSettingsButton"
+            >
+              {i18n.GEN_AI_SETTINGS_BUTTON}


Is it possible to add a check on the GenAI settings button in the o11y / security AI Assistant settings page, and only show it if the user has access to content on the new GenAI settings page i.e. All / None on Connectors and / or ability to manage Spaces.

Currently for a user with a custom role (no ability to manage Spaces) and None for connectors, the link redirects to the Stack Management landing page - not ideal, but not a blocker.

Screen.Recording.2025-08-06.at.15.23.32.mov

Added privilege checks for GenAI Settings button in 39b1bf9
Also improved the GenAI Settings app to require 'All' permissions for Connectors, as having the Manage Connectors button enabled without actually being able to manage them (only view with e.g. Read permission) didn't seem correct.

Changes in 39b1bf9 work well for users with 'None' for Connectors.

For users with Read on Connectors, I think it could be useful to keep that link so that they can see if they have a Gen AI connector configured. The button text should be 'View connectors' rather than 'Manage connectors' and I'd make a small tweak to the description to say In order to use the AI Assistant you must have a Generative AI connector. Not essential, but I think it would be a nice to have.

Done in cc08d9e

…rom tests

…lity

…permissions-based view tests

...ins/private/observability_ai_assistant_management/public/routes/components/settings_page.tsx

viduni94 · 2025-08-07T14:41:37Z

x-pack/platform/plugins/private/gen_ai_settings/public/components/gen_ai_settings_app.tsx

+              <p>
+                <FormattedMessage
+                  id="genAiSettings.aiConnectorDescriptionWithLink"
+                  defaultMessage={`A large language model (LLM) is required to power the AI Assistant and AI-powered features. By default, Elastic uses its {elasticManagedLlm} connector ({link}) when no custom connectors are available. When available, Elastic uses the last used custom connector.${


Some users don't have access to the Elastic Managed LLM.

The current implementation (in main) checks whether the Elastic Managed LLM is available and adjusts the description accordingly.
See

kibana/x-pack/platform/plugins/private/observability_ai_assistant_management/public/routes/components/settings_tab/settings_tab.tsx

Line 134 in 16664c9

!!elasticManagedLlm ? (

Added in 74e1628

…llm check

viduni94

nit:
Should it be Enable or disable AI-powered features in Space settings?
in the Spaces settings sounds a little odd.

nit:
Also for the button, would Go to Space Settings be more appropriate since we are directing the user to the active space settings page and not to the Spaces page? Before this change we were directing the users to the Spaces page, hence why it said Go to Spaces. I know this must have been the case in the design. But i'll leave it up to you.

Everything else looks good to me. Approved!

dmlemeshko

x-pack/platform/test/functional/config.base.ts
x-pack/test/functional/config.base.js

changes LGTM

elasticmachine · 2025-08-11T12:58:34Z

⏳ Build in-progress

Buildkite Build
Commit: cc08d9e
Kibana Serverless Image: docker.elastic.co/kibana-ci/kibana-serverless:pr-227289-cc08d9ec7ad9

History

💚 Build #328240 succeeded ca50eaf
💔 Build #327993 failed 574e2a0
💔 Build #327550 failed c7c48d0
💔 Build #327491 failed a253c7d
💔 Build #327013 failed 35c18e5

cc @rbrtj

peteharverson

Tested latest changes and LGTM

angorayc · 2025-08-11T16:33:17Z

Hi, May I confirm this scenario please?
Here was the Kibana feature I had.
Are we relying on Management > AI Assistant settings to enable the assistant settings or individual settings like Observability > Observability AI Assistant or Security > Elastic AI Assistant?

rbrtj · 2025-08-12T07:04:42Z

Hi, May I confirm this scenario please? Here was the Kibana feature I had. Are we relying on Management > AI Assistant settings to enable the assistant settings or individual settings like Observability > Observability AI Assistant or Security > Elastic AI Assistant?

Hi!
Management > AI Assistant settings is responsible only for displaying the AI Assistants page. To properly access an assistants settings, you need either Observability > Observability AI Assistant or Security > Elastic AI Assistant. The initial idea was to move these privileges so that the Management > AI Assistant settings would be responsible for all settings (both page itself and individual assistant settings), but we can't do that. The current plan (not yet fully confirmed) for future iterations is to remove Management > AI Assistant settings entirely and derive page availability directly from the Observability and Security assistants settings. Your scenario seems correct

angorayc

Thanks for implementing this feature!

viduni94 · 2025-08-12T14:41:26Z

@rbrtj QQ: Since the default LLM connector selection would happen in the GenAI Settings page, should this be backported to everything 8.18.x onwards?

Resolves: elastic#224922 This PR: * Introduces a new `AI` section in Stack Management * Moves all AI Assistant management pages out of the `Kibana` section into the new `AI` setion. * Introduces the `genAISettings` plugin with a `GenAI Settings` page under the new `AI` section to manage generic configurations like connectors and feature visibility. * ~~AI Assistants settings now depend on the `aiAssistantManagementSelection` setting instead of the availability of individual assistants.~~ * ~~Enabled read mode for Security and Observability/Search assistant settings based on the setting above ^~~ It appears that the Assistant settings cannot directly rely on the `AI Assistant Settings` privilege. There are still ongoing discussions about whether we should remove the `AI Assistant Settings` privilege or take a different approach. With that in mind, I reverted some changes in this PR to just create a new section and move `AI Assistants` under it, along with adding the new `GenAI Settings` page. I left the existing privileges checks as they are, they will be updated once the discussions are resolved. <img width="1477" height="954" alt="image" src="https://github.com/user-attachments/assets/8b50bcbc-28df-42fa-82c5-5a8c262b2c9f" /> ### `AI Assistants` scenarios with different privileges: 1. `Management > AI Assistant Settings` - All/Read `Security Assistant` and `Observability Assistant` - All <img width="1717" height="1363" alt="image" src="https://github.com/user-attachments/assets/dcea9c33-4f2d-4ea4-818e-ba6ffaf1a812" /> 2. `Management > AI Assistant Settings` - All/Read, `Security Assistant` and `Observability Assistant` - none <img width="1716" height="1357" alt="image" src="https://github.com/user-attachments/assets/6b26e954-e201-475b-bee9-4a7ca20bd120" /> 3. `Management > AI Assistant Settings` - None <img width="1719" height="1313" alt="image" src="https://github.com/user-attachments/assets/9c38ecc1-693b-4c3b-8c09-f227ba539202" /> 4. No `Enterprise` license. Currently buggy, will be fixed by elastic#230036 <img width="1718" height="1356" alt="image" src="https://github.com/user-attachments/assets/39e07e33-baa3-4eaf-8fa4-c31895605517" /> TBD: - [ ] Manage Connectors should apply filters, however, the connectors page does not currently save filters in the URL state. - [ ] In solution views, take the user directly to the individual Assistant settings - I've decided to hold off on this until the ongoing privilege discussions are resolved, as the implementation may vary depending on the outcome. --------- Co-authored-by: kibanamachine <[email protected]>

Move AI Assistants under new AI section

b6fae2e

rbrtj and others added 20 commits July 10, 2025 16:50

ObservabilityAiAssistantManagement: Update management capabilities

75f8317

ObservabilityAiAssistantManagement: Update mock management capabilities

f5530ba

Update management section tests to not expect aiAssistantManagementSe…

8606b9e

…lection under Kibana section

Update management security test to expect 5 sections instead of 4

b187adb

GenAI Settings plugin initialization && Move AI Connector and AI Feat…

cdcd060

…ure visibility under GenAI Settings

GenAI Settings: Adjust descriptions

5070880

Merge remote-tracking branch 'upstream/main' into stack-management-ai…

d2e026a

…-settings

Merge remote-tracking branch 'upstream/main' into stack-management-ai…

6629f62

…-settings

GenAI Settings: Create Serverless Context && Adjust view in serverless

c4ba2a8

GenAI Settings: Navigate to the current space settings instead of spa…

981d735

…ces list

GenAI Settings: Adjust breadcrumbs

5d70632

AI Assistants - Security: Remove connectors tab

07d9b33

GenAI Settings: Adjust settings for non-serverless solution view

8f0153d

AI Section: Enable AI section in solutions view

57f09cc

AI Section: Enable AI section in solutions view - search

64775c1

GenAI Settings: Get rid of observabilityAiAssistant dependency

0eb441e

GenAI Settings: Enable in serverless

d680222

AI Assistants: Navigate to the particular assistant in solution view

6901bd1

[CI] Auto-commit changed files from 'node scripts/generate codeowners'

43919e5

github-actions bot deployed to docs-preview July 17, 2025 12:49 View deployment

rbrtj added the ci:cloud-deploy Create or update a Cloud deployment label Jul 17, 2025

GenAI Settings: Update bundle size limit

b9e5047

github-actions bot deployed to docs-preview July 17, 2025 13:13 View deployment

rbrtj added 2 commits July 17, 2025 15:14

GenAI Settings: Update jest config

d74300e

Remove Unused Translations

f94b017

github-actions bot deployed to docs-preview July 17, 2025 13:18 View deployment

peteharverson reviewed Aug 6, 2025

View reviewed changes

rbrtj added 3 commits August 7, 2025 14:46

Security AI Assistant Management: Remove unused Capabilities mock f…

a253c7d

…rom tests

GenAI Settings: Add privilege checks for GenAI Settings button visibi…

39b1bf9

…lity

GenAI Settings: Wrap component with KibanaContextProvider and update …

c7c48d0

…permissions-based view tests

rbrtj requested a review from peteharverson August 7, 2025 14:06

viduni94 reviewed Aug 7, 2025

View reviewed changes

...ins/private/observability_ai_assistant_management/public/routes/components/settings_page.tsx Show resolved Hide resolved

viduni94 reviewed Aug 7, 2025

View reviewed changes

rbrtj and others added 2 commits August 8, 2025 15:34

GenAI Settings: Add API client && connector route && elastic managed …

74e1628

…llm check

Merge branch 'main' into stack-management-ai-settings

71f17cc

rbrtj requested a review from viduni94 August 8, 2025 13:36

kibanamachine and others added 2 commits August 8, 2025 13:46

[CI] Auto-commit changed files from 'node scripts/notice'

325df14

AI Assistant Management: Fix tests

574e2a0

viduni94 approved these changes Aug 8, 2025

View reviewed changes

rbrtj and others added 3 commits August 11, 2025 09:34

Merge branch 'main' into stack-management-ai-settings

9d26a68

Security AI Assistant: Fix test

ca50eaf

GenAI Settings: CR changes

cc08d9e

dmlemeshko approved these changes Aug 11, 2025

View reviewed changes

peteharverson approved these changes Aug 11, 2025

View reviewed changes

angorayc approved these changes Aug 12, 2025

View reviewed changes

rbrtj merged commit 7252237 into elastic:main Aug 12, 2025
13 checks passed

viduni94 mentioned this pull request Aug 12, 2025

[Obs AI Assistant] AI Assistant settings updates #224906

Merged

3 tasks

eleonoramicozzi mentioned this pull request Aug 27, 2025

[Obs AI Assistant] Rename AI Assistant management permission #230691

Closed

4 tasks

KDKHD mentioned this pull request Aug 29, 2025

[AI assistant] Add setting to configure default LLM #231940

Merged

10 tasks

rbrtj mentioned this pull request Oct 2, 2025

[Internal]: New AI section in Stack Management & AI assistant navigation header selector elastic/docs-content#3268

Closed

[ML] Adds an AI section into Stack Management #227289

[ML] Adds an AI section into Stack Management #227289

Uh oh!

Conversation

rbrtj commented Jul 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

AI Assistants scenarios with different privileges:

Uh oh!

rbrtj commented Jul 9, 2025

Uh oh!

github-actions bot commented Jul 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Preview links for changed docs

Uh oh!

peteharverson Aug 6, 2025

Choose a reason for hiding this comment

Uh oh!

rbrtj Aug 7, 2025

Choose a reason for hiding this comment

Uh oh!

peteharverson Aug 11, 2025

Choose a reason for hiding this comment

Uh oh!

rbrtj Aug 11, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

viduni94 Aug 7, 2025

Choose a reason for hiding this comment

Uh oh!

rbrtj Aug 8, 2025

Choose a reason for hiding this comment

Uh oh!

viduni94 left a comment

Choose a reason for hiding this comment

Uh oh!

dmlemeshko left a comment

Choose a reason for hiding this comment

Uh oh!

elasticmachine commented Aug 11, 2025

⏳ Build in-progress

History

Uh oh!

peteharverson left a comment

Choose a reason for hiding this comment

Uh oh!

angorayc commented Aug 11, 2025

Uh oh!

rbrtj commented Aug 12, 2025

Uh oh!

angorayc left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

viduni94 commented Aug 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

18 participants

[ML] Adds an `AI` section into `Stack Management` #227289

[ML] Adds an `AI` section into `Stack Management` #227289

rbrtj commented Jul 9, 2025 •

edited

Loading

`AI Assistants` scenarios with different privileges:

github-actions bot commented Jul 17, 2025 •

edited

Loading