Skip to content

Commit 062ae52

Browse files
authored
[DOCS] Drafts data frame privileges (#231)
1 parent 8a26bd4 commit 062ae52

File tree

2 files changed

+22
-8
lines changed

2 files changed

+22
-8
lines changed

docs/en/stack/security/authorization/built-in-roles.asciidoc

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,14 @@ suitable for writing beats output to {es}.
3737

3838
--
3939

40+
[[built-in-roles-data-frame-transforms-admin]] `data_frame_transforms_admin` ::
41+
Grants `manage_data_frame_transforms` cluster privileges, which enable you to
42+
manage data frames.
43+
44+
[[built-in-roles-data-frame-transforms-user]] `data_frame_transforms_user` ::
45+
Grants `monitor_data_fram_transforms` cluster privileges, which enable you to
46+
use data frames.
47+
4048
[[built-in-roles-ingest-user]] `ingest_admin` ::
4149
Grants access to manage *all* index templates and *all* ingest pipeline configurations.
4250
+

docs/en/stack/security/authorization/privileges.asciidoc

Lines changed: 14 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,11 @@ patterns. It also includes the authority to grant the privileges necessary to
2828
manage follower indices and auto-follow patterns. This privilege is necessary
2929
only on clusters that contain follower indices.
3030

31+
`manage_data_frame_transforms`::
32+
All operations related to managing data frames.
33+
3134
`manage_ilm`::
32-
All {Ilm} operations related to managing policies
35+
All {Ilm} operations related to managing policies.
3336

3437
`manage_index_templates`::
3538
All operations on index templates.
@@ -83,25 +86,28 @@ security roles of the user who created or updated them.
8386
All cluster read-only operations, like cluster health and state, hot threads,
8487
node info, node and cluster stats, and pending cluster tasks.
8588

89+
`monitor_data_frame_transforms`::
90+
All read-only operations related to data frames.
91+
8692
`monitor_ml`::
87-
All read only {ml} operations, such as getting information about {dfeeds}, jobs,
93+
All read-only {ml} operations, such as getting information about {dfeeds}, jobs,
8894
model snapshots, or results.
8995

9096
`monitor_rollup`::
91-
All read only rollup operations, such as viewing the list of historical and
97+
All read-only rollup operations, such as viewing the list of historical and
9298
currently running rollup jobs and their capabilities.
9399

94100
`monitor_watcher`::
95-
All read only watcher operations, such as getting a watch and watcher stats.
101+
All read-only watcher operations, such as getting a watch and watcher stats.
96102

97103
`read_ccr`::
98-
All read only {ccr} operations, such as getting information about indices and
104+
All read-only {ccr} operations, such as getting information about indices and
99105
metadata for leader indices in the cluster. It also includes the authority to
100106
check whether users have the appropriate privileges to follow leader indices.
101107
This privilege is necessary only on clusters that contain leader indices.
102108

103109
`read_ilm`::
104-
All read only {Ilm} operations, such as getting policies and checking the
110+
All read-only {Ilm} operations, such as getting policies and checking the
105111
status of {Ilm}
106112

107113
`transport_client`::
@@ -161,12 +167,12 @@ All actions that are required for monitoring (recovery, segments info, index
161167
stats and status).
162168

163169
`read`::
164-
Read only access to actions (count, explain, get, mget, get indexed scripts,
170+
Read-only access to actions (count, explain, get, mget, get indexed scripts,
165171
more like this, multi percolate/search/termvector, percolate, scroll,
166172
clear_scroll, search, suggest, tv).
167173

168174
`read_cross_cluster`::
169-
Read only access to the search action from a <<cross-cluster-configuring,remote cluster>>.
175+
Read-only access to the search action from a <<cross-cluster-configuring,remote cluster>>.
170176

171177
`view_index_metadata`::
172178
Read-only access to index metadata (aliases, aliases exists, get index, exists, field mappings,

0 commit comments

Comments
 (0)