From 51d7fde5f1821f1fd5f37a0d9797bce14a8a3a7f Mon Sep 17 00:00:00 2001 From: Jake Landis Date: Thu, 12 Oct 2023 15:15:42 -0500 Subject: [PATCH] move manage_enrich from role to priv --- .../security/authorization/built-in-roles.asciidoc | 9 ++------- .../reference/security/authorization/privileges.asciidoc | 5 +++++ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/docs/reference/security/authorization/built-in-roles.asciidoc b/docs/reference/security/authorization/built-in-roles.asciidoc index e1612032349e1..14808140873fd 100644 --- a/docs/reference/security/authorization/built-in-roles.asciidoc +++ b/docs/reference/security/authorization/built-in-roles.asciidoc @@ -141,11 +141,6 @@ read access to the `.ml-notifications` and `.ml-anomalies*` indices {ml-cap} users also need index privileges for source and destination indices and roles that grant access to {kib}. See {ml-docs-setup-privileges}. -[[built-in-roles-manage-enrich]] `manage_enrich`:: -Grants privileges to access and use all of the {ref}/enrich-apis.html[enrich APIs]. -Users with this role can manage enrich policies that add data from your existing -indices to incoming documents during ingest. - [[built-in-roles-monitoring-user]] `monitoring_user`:: Grants the minimum privileges required for any user of {monitoring} other than those required to use {kib}. This role grants access to the monitoring indices and grants @@ -171,10 +166,10 @@ Reporting users should also be assigned additional roles that grant access to the <> that will be used to generate reports. [[built-in-roles-rollup-admin]] `rollup_admin`:: -Grants `manage_rollup` cluster privileges, which enable you to manage and execute all rollup actions. +Grants `manage_rollup` cluster privileges, which enable you to manage and execute all rollup actions. [[built-in-roles-rollup-user]] `rollup_user`:: -Grants `monitor_rollup` cluster privileges, which enable you to perform read-only operations related to rollups. +Grants `monitor_rollup` cluster privileges, which enable you to perform read-only operations related to rollups. [[built-in-roles-snapshot-user]] `snapshot_user`:: Grants the necessary privileges to create snapshots of **all** the indices and diff --git a/docs/reference/security/authorization/privileges.asciidoc b/docs/reference/security/authorization/privileges.asciidoc index 3df15c404fdbe..c30acc4307483 100644 --- a/docs/reference/security/authorization/privileges.asciidoc +++ b/docs/reference/security/authorization/privileges.asciidoc @@ -79,6 +79,11 @@ patterns. It also includes the authority to grant the privileges necessary to manage follower indices and auto-follow patterns. This privilege is necessary only on clusters that contain follower indices. +`manage_enrich`:: +Grants access and use all of the {ref}/enrich-apis.html[enrich APIs]. +Users with this privilege can manage enrich policies that add data from your existing +indices to incoming documents during ingest. + `manage_ilm`:: All {Ilm} operations related to managing policies.