From 85c3f915deba9b6a9562b27b48d8abae645609c9 Mon Sep 17 00:00:00 2001 From: Chris Moore <107723039+cwillum@users.noreply.github.com> Date: Thu, 23 Mar 2023 08:15:05 -0700 Subject: [PATCH] Add documentation to rename opensearch_dashboards predefined roles to kibana (#3426) * fix#2723-OSD-kibana-roles Signed-off-by: cwillum * fix#2723-OSD-kibana-roles Signed-off-by: cwillum * fix#2723-OSD-kibana-roles Signed-off-by: cwillum --------- Signed-off-by: cwillum --- _security/access-control/users-roles.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_security/access-control/users-roles.md b/_security/access-control/users-roles.md index 0b3ec0b2..55677eeb 100644 --- a/_security/access-control/users-roles.md +++ b/_security/access-control/users-roles.md @@ -113,8 +113,8 @@ Role | Description `cross_cluster_replication_leader_full_access` | Grants full access to perform cross-cluster replication actions on the leader cluster. `observability_full_access` | Grants full access to perform actions on Observability objects such as visualizations, notebooks, and operational panels. `observability_read_access` | Grants permission to view Observability objects such as visualizations, notebooks, and operational panels, but not create, modify, or delete them. -`opensearch_dashboards_read_only` | A special role that prevents users from making changes to visualizations, dashboards, and other OpenSearch Dashboards objects. See `opensearch_security.readonly_mode.roles` in `opensearch_dashboards.yml`. Pair with the `opensearch_dashboards_user` role. -`opensearch_dashboards_user` | Grants permissions to use OpenSearch Dashboards: cluster-wide searches, index monitoring, and write to various OpenSearch Dashboards indices. +`kibana_read_only` | A special role that prevents users from making changes to visualizations, dashboards, and other OpenSearch Dashboards objects. To enable read-only mode in Dashboards, add the `opensearch_security.readonly_mode.roles` setting to the `opensearch_dashboards.yml` file and include the role as a setting value. See the [example configuration]({{site.url}}{{site.baseurl}}/dashboards/branding/#sample-configuration) in Dashboards documentation. +`kibana_user` | Grants permissions to use OpenSearch Dashboards: cluster-wide searches, index monitoring, and write to various OpenSearch Dashboards indexes. `logstash` | Grants permissions for Logstash to interact with the cluster: cluster-wide searches, cluster monitoring, and write to the various Logstash indices. `manage_snapshots` | Grants permissions to manage snapshot repositories, take snapshots, and restore snapshots. `readall` | Grants permissions for cluster-wide searches like `msearch` and search permissions for all indices.