mirror of
https://github.com/iSharkFly-Docs/opensearch-docs-cn
synced 2025-02-28 22:59:19 +00:00
7012af124a
* Fixing documentation for Wildcard in term-level queries section for Query DSL Signed-off-by: Samuel Valdes Gutierrez <valdesgutierrez@gmail.com> * replacing 'indices' term for 'indexes' term ONLY for description texts (not variables, links or properties) Signed-off-by: Samuel Valdes Gutierrez <valdesgutierrez@gmail.com> * Update creating-custom-workloads.md Signed-off-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> * updating changes suggested by Naarcha-AWS Signed-off-by: Samuel Valdes Gutierrez <valdesgutierrez@gmail.com> * updating changes suggested by Naarcha-AWS Signed-off-by: Samuel Valdes Gutierrez <valdesgutierrez@gmail.com> * Rename _benchmark/workloads/index.md to _benchmark/workloads/reference/index.md Signed-off-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> * Rename _benchmark/workloads/indices.md to _benchmark/workloads/reference/indices.md Signed-off-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> --------- Signed-off-by: Samuel Valdes Gutierrez <valdesgutierrez@gmail.com> Signed-off-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>
2.5 KiB
2.5 KiB
| layout | title | parent | nav_order | redirect_from | ||
|---|---|---|---|---|---|---|
| default | Default action groups | Access control | 115 |
|
Default action groups
This page catalogs all default action groups. Often, the most coherent way to create new action groups is to use a combination of these default groups and individual permissions.
General
| Name | Description |
|---|---|
| unlimited | Grants complete access. Can be used on an cluster- or index-level. Equates to "*". |
| {% comment %}kibana_all_read | asdf |
| kibana_all_write | asdf{% endcomment %} |
Cluster-level
| Name | Description |
|---|---|
| cluster_all | Grants all cluster permissions. Equates to cluster:*. |
| cluster_monitor | Grants all cluster monitoring permissions. Equates to cluster:monitor/*. |
| cluster_composite_ops_ro | Grants read-only permissions to execute requests like mget, msearch, or mtv, plus permissions to query for aliases. |
| cluster_composite_ops | Same as CLUSTER_COMPOSITE_OPS_RO, but also grants bulk permissions and all aliases permissions. |
| manage_snapshots | Grants permissions to manage snapshots and repositories. |
| cluster_manage_pipelines | Grants permissions to manage ingest pipelines. |
| cluster_manage_index_templates | Grants permissions to manage index templates. |
Index-level
| Name | Description |
|---|---|
| indices_all | Grants all permissions on the index. Equates to indices:*. |
| get | Grants permissions to use get and mget actions only. |
| read | Grants read permissions such as search, get field mappings, get, and mget. |
| write | Grants permissions to create and update documents within existing indices. To create new indexes, see create_index. |
| delete | Grants permissions to delete documents. |
| crud | Combines the read, write, and delete action groups. Included in the data_access action group. |
| search | Grants permissions to search documents. Includes suggest. |
| suggest | Grants permissions to use the suggest API. Included in the read action group. |
| create_index | Grants permissions to create indexes and mappings. |
| indices_monitor | Grants permissions to execute all index monitoring actions (e.g. recovery, segments info, index stats, and status). |
| index | A more limited version of the write action group. |
| data_access | Combines the crud action group with indices:data/*. |
| manage_aliases | Grants permissions to manage aliases. |
| manage | Grants all monitoring and administration permissions for indexes. |