From cfdb9899343d9cedc6d547f2ff2a79fdccffce1f Mon Sep 17 00:00:00 2001 From: Shaunak Kashyap Date: Tue, 10 Jul 2018 06:30:22 -0700 Subject: [PATCH 1/2] Documents built-in `beats_admin` role --- .../security/authorization/built-in-roles.asciidoc | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/docs/en/stack/security/authorization/built-in-roles.asciidoc b/docs/en/stack/security/authorization/built-in-roles.asciidoc index e2d8c9766..cb35e2c73 100644 --- a/docs/en/stack/security/authorization/built-in-roles.asciidoc +++ b/docs/en/stack/security/authorization/built-in-roles.asciidoc @@ -14,6 +14,10 @@ to users. These roles have a fixed set of privileges and cannot be updated. Grants access necessary for the APM system user to send system-level data (such as monitoring) to {es}. +[[built-in-roles-beats-admin]] `beats_admin` :: +Grants access to the `.management-beats` index, which contains configuration +information for the Beats. + [[built-in-roles-beats-system]] `beats_system` :: Grants access necessary for the Beats system user to send system-level data (such as monitoring) to {es}. @@ -73,6 +77,16 @@ suitable for use within a Logstash pipeline. =============================== -- +[[built-in-roles-beats-system]] `beats_system` :: +Grants access necessary for the Beats system user to send system-level data +(such as monitoring) to {es}. ++ +NOTE: This role should not be assigned to users as the granted permissions may +change between releases. ++ +NOTE: This role does not provide access to the beats indices and is not +suitable for writing beats output to {es}. + [[built-in-roles-ml-admin]] `machine_learning_admin`:: Grants `manage_ml` cluster privileges and read access to the `.ml-*` indices. From 7fa330086c0cc2e4a4e6f8153ef4d6fb47d2591b Mon Sep 17 00:00:00 2001 From: Shaunak Kashyap Date: Tue, 10 Jul 2018 08:19:50 -0700 Subject: [PATCH 2/2] Clarifying purpose of index --- .../security/authorization/built-in-roles.asciidoc | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/docs/en/stack/security/authorization/built-in-roles.asciidoc b/docs/en/stack/security/authorization/built-in-roles.asciidoc index cb35e2c73..dfeb0391e 100644 --- a/docs/en/stack/security/authorization/built-in-roles.asciidoc +++ b/docs/en/stack/security/authorization/built-in-roles.asciidoc @@ -77,16 +77,6 @@ suitable for use within a Logstash pipeline. =============================== -- -[[built-in-roles-beats-system]] `beats_system` :: -Grants access necessary for the Beats system user to send system-level data -(such as monitoring) to {es}. -+ -NOTE: This role should not be assigned to users as the granted permissions may -change between releases. -+ -NOTE: This role does not provide access to the beats indices and is not -suitable for writing beats output to {es}. - [[built-in-roles-ml-admin]] `machine_learning_admin`:: Grants `manage_ml` cluster privileges and read access to the `.ml-*` indices.