Failing test: Automated response actions form RBAC - rule_author cannot edit or remove existing Elastic Defend response actions
Author: kibanamachineCreated Sep 11, 2026Updated Sep 18, 2026
Labelsfailed-testTeam:Defend Workflowsscout-playwrightfailure:ci-environment
A test failed on a tracked branch
Scout Test Details:
| Field | Value |
|---|---|
| Test ID | cd5149de2565f1d-8339d1821f3d70f |
| Target | cloud-serverless-security_complete |
| Location | x-pack/solutions/security/plugins/security_solution/test/scout/edr_response_actions/ui/parallel_tests/form_rbac.spec.ts |
| Duration | 0.58s |
| Module | securitySolution (plugin) |
| Config path | x-pack/solutions/security/plugins/security_solution/test/scout/edr_response_actions/ui/parallel.playwright.config.ts |
| Code Owners | elastic/security-defend-workflows |
Error: User with 'rule_author' role is not defined
at SamlSessionManager.hostOptionsWithoutAuth (src/platform/packages/shared/kbn-test-saml-auth/src/session_manager.ts:208:17)
at SamlSessionManager.createSessionForRole (src/platform/packages/shared/kbn-test-saml-auth/src/session_manager.ts:78:31)
at SamlSessionManager.forceNewSession (src/platform/packages/shared/kbn-test-saml-auth/src/session_manager.ts:223:14)
at SamlSessionManager.getInteractiveUserSessionCookieWithRoleScope (src/platform/packages/shared/kbn-test-saml-auth/src/session_manager.ts:240:24)
at Object.browserAuth (src/platform/packages/shared/kbn-scout/src/playwright/fixtures/scope/test/browser_auth/index.ts:75:27)
at x-pack/solutions/security/plugins/security_solution/test/scout/edr_response_actions/ui/parallel_tests/form_rbac.spec.ts:16:35First failure: appex-qa-serverless-kibana-scout-tests - main
Source: elastic/kibana