File tree Expand file tree Collapse file tree 2 files changed +7
-2
lines changed
en/security/authorization Expand file tree Collapse file tree 2 files changed +7
-2
lines changed Original file line number Diff line number Diff line change @@ -81,7 +81,6 @@ buildRestTests.expectedUnconvertedCandidates = [
8181 ' en/rest-api/ml/validate-job.asciidoc' ,
8282 ' en/rest-api/security/authenticate.asciidoc' ,
8383 ' en/rest-api/watcher/stats.asciidoc' ,
84- ' en/security/authorization/managing-roles.asciidoc' ,
8584 ' en/watcher/example-watches/watching-time-series-data.asciidoc' ,
8685]
8786
Original file line number Diff line number Diff line change @@ -12,6 +12,8 @@ A role is defined by the following JSON structure:
1212 "indices": [ ... ] <3>
1313}
1414-----
15+ // NOTCONSOLE
16+
1517<1> A list of usernames the owners of this role can <<run-as-privilege, impersonate>>.
1618<2> A list of cluster privileges. These privileges define the
1719 cluster level actions users with this role are able to execute. This field
@@ -37,6 +39,8 @@ The following describes the structure of an indices permissions entry:
3739 "query": "..." <4>
3840}
3941-------
42+ // NOTCONSOLE
43+
4044<1> A list of indices (or index name patterns) to which the permissions in this
4145 entry apply.
4246<2> The index level privileges the owners of the role have on the associated
@@ -77,8 +81,9 @@ The following snippet shows an example definition of a `clicks_admin` role:
7781
7882[source,js]
7983-----------
84+ POST /_xpack/security/role/clicks_admin
8085{
81- "run_as": [ "clicks_watcher_1" ]
86+ "run_as": [ "clicks_watcher_1" ],
8287 "cluster": [ "monitor" ],
8388 "indices": [
8489 {
@@ -92,6 +97,7 @@ The following snippet shows an example definition of a `clicks_admin` role:
9297 ]
9398}
9499-----------
100+ // CONSOLE
95101
96102Based on the above definition, users owning the `clicks_admin` role can:
97103
You can’t perform that action at this time.
0 commit comments