Admin role for Query insights plugin (opensearch-project#4006)

Signed-off-by: Chenyang Ji <[email protected]>
cwperks · Feb 5, 2024 · 6b9ded2 · 6b9ded2
1 parent f75d0c9
commit 6b9ded2
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/config/roles.yml b/config/roles.yml
@@ -399,3 +399,9 @@ flow_framework_read_access:
     - 'cluster:admin/opensearch/flow_framework/workflow_state/get'
     - 'cluster:admin/opensearch/flow_framework/workflow_state/search'
     - 'cluster:admin/opensearch/flow_framework/workflow_step/get'
+
+# Allows users to use all query insights APIs
+query_insights_full_access:
+  reserved: true
+  cluster_permissions:
+    - 'cluster:admin/opensearch/insights/top_queries/*'