Skip to content

Commit

Permalink
Add default roles for sql plugin (opensearch-project#2729)
Browse files Browse the repository at this point in the history
Signed-off-by: Sean Kao <seankao@amazon.com>
Signed-off-by: Sam <samuel.costa@eliatra.com>
  • Loading branch information
seankao-az authored and samuelcostae committed Jun 19, 2023
1 parent eb00928 commit 12f0f76
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions config/roles.yml
Original file line number Diff line number Diff line change
Expand Up @@ -136,6 +136,19 @@ observability_full_access:
- 'cluster:admin/opensearch/observability/delete'
- 'cluster:admin/opensearch/observability/get'

# Allows users to all PPL functionality
ppl_full_access:
reserved: true
cluster_permissions:
- 'cluster:admin/opensearch/ppl'
index_permissions:
- index_patterns:
- '*'
allowed_actions:
- 'indices:admin/mappings/get'
- 'indices:data/read/search*'
- 'indices:monitor/settings/get'

# Allows users to read and download Reports
reports_instances_read_access:
reserved: true
Expand Down Expand Up @@ -228,6 +241,16 @@ cross_cluster_replication_follower_full_access:
- "indices:admin/plugins/replication/index/update"
- "indices:admin/plugins/replication/index/status_check"

# Allows users to use all cross cluster search functionality at remote cluster
cross_cluster_search_remote_full_access:
reserved: true
index_permissions:
- index_patterns:
- '*'
allowed_actions:
- 'indices:admin/shards/search_shards'
- 'indices:data/read/search'

# Allow users to read ML stats/models/tasks
ml_read_access:
reserved: true
Expand Down

0 comments on commit 12f0f76

Please sign in to comment.