Skip to content

Commit 8c5c24d

Browse files
authored
Update index privileges doc to include data streams (#59139) (#60170)
1 parent b7c9138 commit 8c5c24d

File tree

1 file changed

+15
-13
lines changed

1 file changed

+15
-13
lines changed

x-pack/docs/en/security/authorization/privileges.asciidoc

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -148,7 +148,7 @@ cluster to enable <<cross-cluster-configuring,Cross Cluster Search>>.
148148

149149
[horizontal]
150150
`all`::
151-
Any action on an index
151+
Any action on an index or data stream.
152152

153153
`auto_configure`::
154154
Permits auto-creation of indices and data streams. An auto-create action is the
@@ -204,15 +204,16 @@ privilege (and no higher privilege such as `index` or `write`), you must ensure
204204
--
205205

206206
`create_index`::
207-
Privilege to create an index. A create index request may contain aliases to be
208-
added to the index once created. In that case the request requires the `manage`
209-
privilege as well, on both the index and the aliases names.
207+
Privilege to create an index or data stream. A create index request may contain
208+
aliases to be added to the index once created. In that case the request
209+
requires the `manage` privilege as well, on both the index and the aliases
210+
names.
210211

211212
`delete`::
212213
Privilege to delete documents.
213214

214215
`delete_index`::
215-
Privilege to delete an index.
216+
Privilege to delete an index or data stream.
216217

217218
`index`::
218219
Privilege to index (overwriting included) and update documents.
@@ -227,9 +228,9 @@ Permits refresh, flush, synced flush and force merge index administration operat
227228
No privilege to read or write index data or otherwise manage the index.
228229

229230
`manage`::
230-
All `monitor` privileges plus index administration (aliases, analyze, cache clear,
231-
close, delete, exists, flush, mapping, open, force merge, refresh, settings,
232-
search shards, templates, validate).
231+
All `monitor` privileges plus index and data stream administration (aliases,
232+
analyze, cache clear, close, delete, exists, flush, mapping, open, force merge,
233+
refresh, settings, search shards, templates, validate).
233234

234235
`manage_follow_index`::
235236
All actions that are required to manage the lifecycle of a follower index, which
@@ -238,8 +239,8 @@ index. This privilege is necessary only on clusters that contain follower indice
238239

239240
`manage_ilm`::
240241
All {Ilm} operations relating to managing the execution of policies of an index
241-
This includes operations like retrying policies, and removing a policy
242-
from an index.
242+
or data stream. This includes operations such as retrying policies and removing
243+
a policy from an index or data stream.
243244

244245
`manage_leader_index`::
245246
All actions that are required to manage the lifecycle of a leader index, which
@@ -259,9 +260,10 @@ clear_scroll, search, suggest, tv).
259260
Read-only access to the search action from a <<cross-cluster-configuring,remote cluster>>.
260261

261262
`view_index_metadata`::
262-
Read-only access to index metadata (aliases, aliases exists, get index, exists, field mappings,
263-
mappings, search shards, type exists, validate, warmers, settings, ilm). This
264-
privilege is primarily available for use by {kib} users.
263+
Read-only access to index and data stream metadata (aliases, aliases exists,
264+
get index, get data stream, exists, field mappings, mappings, search shards,
265+
type exists, validate, warmers, settings, ilm). This privilege is available
266+
for use primarily by {kib} users.
265267

266268
`write`::
267269
Privilege to perform all write operations to documents, which includes the

0 commit comments

Comments
 (0)