From b9a4b51466c2d1bcf7c37036b543f92acdb5082e Mon Sep 17 00:00:00 2001 From: vagimeli Date: Thu, 4 May 2023 17:53:28 -0600 Subject: [PATCH] Revert "Add documentation to rename opensearch_dashboards predefined roles to kibana (#3426)" This reverts commit 9648b2c40f1a236581eeb2905af3222c86c86953. --- _security/access-control/users-roles.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_security/access-control/users-roles.md b/_security/access-control/users-roles.md index 55677eeb80..0b3ec0b2e7 100644 --- a/_security/access-control/users-roles.md +++ b/_security/access-control/users-roles.md @@ -113,8 +113,8 @@ Role | Description `cross_cluster_replication_leader_full_access` | Grants full access to perform cross-cluster replication actions on the leader cluster. `observability_full_access` | Grants full access to perform actions on Observability objects such as visualizations, notebooks, and operational panels. `observability_read_access` | Grants permission to view Observability objects such as visualizations, notebooks, and operational panels, but not create, modify, or delete them. -`kibana_read_only` | A special role that prevents users from making changes to visualizations, dashboards, and other OpenSearch Dashboards objects. To enable read-only mode in Dashboards, add the `opensearch_security.readonly_mode.roles` setting to the `opensearch_dashboards.yml` file and include the role as a setting value. See the [example configuration]({{site.url}}{{site.baseurl}}/dashboards/branding/#sample-configuration) in Dashboards documentation. -`kibana_user` | Grants permissions to use OpenSearch Dashboards: cluster-wide searches, index monitoring, and write to various OpenSearch Dashboards indexes. +`opensearch_dashboards_read_only` | A special role that prevents users from making changes to visualizations, dashboards, and other OpenSearch Dashboards objects. See `opensearch_security.readonly_mode.roles` in `opensearch_dashboards.yml`. Pair with the `opensearch_dashboards_user` role. +`opensearch_dashboards_user` | Grants permissions to use OpenSearch Dashboards: cluster-wide searches, index monitoring, and write to various OpenSearch Dashboards indices. `logstash` | Grants permissions for Logstash to interact with the cluster: cluster-wide searches, cluster monitoring, and write to the various Logstash indices. `manage_snapshots` | Grants permissions to manage snapshot repositories, take snapshots, and restore snapshots. `readall` | Grants permissions for cluster-wide searches like `msearch` and search permissions for all indices.