Skip to content

Commit 36dea66

Browse files
authored
[DOCS] Adds read_ccr and manage_ccr privileges
2 parents 77ec561 + 84efa9b commit 36dea66

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

docs/en/stack/security/authorization/privileges.asciidoc

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,12 @@ This includes snapshotting, updating settings, and rerouting. It also includes
2929
obtaining snapshot and restore status. This privilege does not include the
3030
ability to manage security.
3131

32+
`manage_ccr`::
33+
All {ccr} operations related to managing follower indices and auto-follow
34+
patterns. It also includes the authority to grant the privileges necessary to
35+
manage follower indices and auto-follow patterns. This privilege is necessary
36+
only on clusters that contain follower indices.
37+
3238
`manage_index_templates`::
3339
All operations on index templates.
3440

@@ -62,6 +68,12 @@ who created or updated them.
6268

6369
--
6470

71+
`read_ccr`::
72+
All read only {ccr} operations, such as getting information about indices and
73+
metadata for leader indices in the cluster. It also includes the authority to
74+
check whether users have the appropriate privileges to follow leader indices.
75+
This privilege is necessary only on clusters that contain leader indices.
76+
6577
`transport_client`::
6678
All privileges necessary for a transport client to connect. Required by the remote
6779
cluster to enable <<cross-cluster-configuring,Cross Cluster Search>>.
@@ -82,6 +94,11 @@ All `monitor` privileges plus index administration (aliases, analyze, cache clea
8294
close, delete, exists, flush, mapping, open, force merge, refresh, settings,
8395
search shards, templates, validate).
8496

97+
`manage_follow_index`::
98+
All actions that are required to manage the lifecycle of a follower index, which
99+
includes creating a follower index, closing it, and converting it to a regular
100+
index. This privilege is necessary only on clusters that contain follower indices.
101+
85102
`view_index_metadata`::
86103
Read-only access to index metadata (aliases, aliases exists, get index, exists, field mappings,
87104
mappings, search shards, type exists, validate, warmers, settings). This

0 commit comments

Comments
 (0)