From 538e76ef07b1617e33ab0e3a9cb490beb0b3bb21 Mon Sep 17 00:00:00 2001 From: Justin Cranford Date: Tue, 2 Aug 2022 14:15:36 -0400 Subject: [PATCH] Mention `_async_search` internal user which was added in 7.7 --- .../docs/en/security/authentication/internal-users.asciidoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/x-pack/docs/en/security/authentication/internal-users.asciidoc b/x-pack/docs/en/security/authentication/internal-users.asciidoc index 91b5d70239495..86fc0254fed76 100644 --- a/x-pack/docs/en/security/authentication/internal-users.asciidoc +++ b/x-pack/docs/en/security/authentication/internal-users.asciidoc @@ -2,9 +2,9 @@ [[internal-users]] === Internal users -The {stack-security-features} use three _internal_ users (`_system`, `_xpack`, -and `_xpack_security`), which are responsible for the operations that take place -inside an {es} cluster. +The {stack-security-features} use four _internal_ users (`_system`, `_xpack`, +`_xpack_security`, and `_async_search`), which are responsible for the operations +that take place inside an {es} cluster. These users are only used by requests that originate from within the cluster. For this reason, they cannot be used to authenticate against the API and there