Skip to content

Commit 7a378d1

Browse files
snapshot_user built-in role and create_snapshot cluster priv (#212)
This is the docs part for the `snapshot_user` role and the `create_snapshot` cluster privilege which were added in [elastic/elasticsearch#35820](elastic/elasticsearch#35820)
1 parent 402ab73 commit 7a378d1

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

docs/en/stack/security/authorization/built-in-roles.asciidoc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -111,6 +111,12 @@ user has access to only their own reports. Reporting users should also be
111111
assigned the `kibana_user` role and a role that grants them access to the data
112112
that will be used to generate reports.
113113

114+
[[built-in-roles-snapshot-user]] `snapshot_user`::
115+
Grants the necessary privileges to create snapshots of **all** the indices and
116+
to view their metadata. This role enables users to view the configuration of
117+
existing snapshot repositories and snapshot details. It does not grant authority
118+
to remove or add repositories or to restore snapshots. It also does not enable
119+
to change index settings or to read or update index data.
114120

115121
[[built-in-roles-superuser]] `superuser`::
116122
Grants full access to the cluster, including all indices and data. A user with

docs/en/stack/security/authorization/privileges.asciidoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,10 @@ This section lists the privileges that you can assign to a role.
1212
All cluster administration operations, like snapshotting, node shutdown/restart,
1313
settings update, rerouting, or managing users and roles.
1414

15+
`create_snapshot`::
16+
Privileges to create snapshots for existing repositories. Can also list and view
17+
details on existing repositories and snapshots.
18+
1519
`manage`::
1620
Builds on `monitor` and adds cluster operations that change values in the cluster.
1721
This includes snapshotting, updating settings, and rerouting. It also includes

0 commit comments

Comments
 (0)