admin:
  cluster:
    - all
  indices:
    - names: '*'
      privileges:
        - all

watcher_manager:
  cluster:
    - manage
  indices:
    - names: '.watcher-history-*'
      privileges:
        - all
  run_as:
    - powerless_user
    - watcher_manager

watcher_monitor:
  cluster:
    - monitor
  indices:
    - names: '.watcher-history-*'
      privileges:
        - read

crappy_role:
  cluster:
    - cluster:monitor/nodes/info
    - cluster:monitor/health
    - cluster:monitor/nodes/liveness
    - cluster:monitor/main