honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[DOCS] Clarifies machine learning built-in roles (#51504)

This commit is contained in:
Lisa Cawley 2020-02-11 18:27:33 -08:00 committed by lcawl
parent 79e5e809b6
commit dd14210689
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
x-pack/docs/en/security/authorization/built-in-roles.asciidoc
View File

@ -106,17 +106,22 @@ suitable for use within a Logstash pipeline.
-- --
[[built-in-roles-ml-admin]] `machine_learning_admin`:: [[built-in-roles-ml-admin]] `machine_learning_admin`::
Grants `manage_ml` cluster privileges, read access to `.ml-anomalies*`, Provides all of the privileges of the `machine_learning_user` role plus the full
`.ml-notifications*`, `.ml-state*`, `.ml-meta*` indices and write access to use of the {ml} APIs. Grants `manage_ml` cluster privileges, read access to
`.ml-annotations*` indices. This role also includes all `.ml-anomalies*`, `.ml-notifications*`, `.ml-state*`, `.ml-meta*` indices and
{kibana-ref}/kibana-privileges.html[Kibana privileges] for the {ml-features}. write access to `.ml-annotations*` indices. {ml-cap} administrators also need
index privileges for source and destination indices and roles that grant
access to {kib}.
See {ml-docs}/setup.html#setup-privileges[{ml-cap} security privileges].
[[built-in-roles-ml-user]] `machine_learning_user`:: [[built-in-roles-ml-user]] `machine_learning_user`::
Grants the minimum privileges required to view {ml} configuration, Grants the minimum privileges required to view {ml} configuration,
status, and work with results. This role grants `monitor_ml` cluster privileges, status, and work with results. This role grants `monitor_ml` cluster privileges,
read access to the `.ml-notifications` and `.ml-anomalies*` indices read access to the `.ml-notifications` and `.ml-anomalies*` indices
(which store {ml} results), and write access to `.ml-annotations*` indices. (which store {ml} results), and write access to `.ml-annotations*` indices.
This role also includes all {kibana-ref}/kibana-privileges.html[Kibana privileges] for the {ml-features}. {ml-cap} users also need index privileges for source and destination
indices and roles that grant access to {kib}. See
{ml-docs}/setup.html#setup-privileges[{ml-cap} security privileges].
[[built-in-roles-monitoring-user]] `monitoring_user`:: [[built-in-roles-monitoring-user]] `monitoring_user`::
Grants the minimum privileges required for any user of {monitoring} other than those Grants the minimum privileges required for any user of {monitoring} other than those