Skip to content

Commit 9d291bb

Browse files
snapshot_user built-in role and create_snapshot cluster priv (#212)
This is the docs part for the `snapshot_user` role and the `create_snapshot` cluster privilege which were added in [elastic/elasticsearch#35820](elastic/elasticsearch#35820)
1 parent e6544b3 commit 9d291bb

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

docs/en/stack/security/authorization/built-in-roles.asciidoc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,12 @@ user has access to only their own reports. Reporting users should also be
107107
assigned the `kibana_user` role and a role that grants them access to the data
108108
that will be used to generate reports.
109109

110+
[[built-in-roles-snapshot-user]] `snapshot_user`::
111+
Grants the necessary privileges to create snapshots of **all** the indices and
112+
to view their metadata. This role enables users to view the configuration of
113+
existing snapshot repositories and snapshot details. It does not grant authority
114+
to remove or add repositories or to restore snapshots. It also does not enable
115+
to change index settings or to read or update index data.
110116

111117
[[built-in-roles-superuser]] `superuser`::
112118
Grants full access to the cluster, including all indices and data. A user with

docs/en/stack/security/authorization/privileges.asciidoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,10 @@ This section lists the privileges that you can assign to a role.
1212
All cluster administration operations, like snapshotting, node shutdown/restart,
1313
settings update, rerouting, or managing users and roles.
1414

15+
`create_snapshot`::
16+
Privileges to create snapshots for existing repositories. Can also list and view
17+
details on existing repositories and snapshots.
18+
1519
`manage`::
1620
Builds on `monitor` and adds cluster operations that change values in the cluster.
1721
This includes snapshotting, updating settings, and rerouting. It also includes

0 commit comments

Comments
 (0)