From 546f81b7554ebb0aaa2279f20017cda4bf5c56ee Mon Sep 17 00:00:00 2001 From: Shaunak Kashyap Date: Tue, 10 Jul 2018 06:30:22 -0700 Subject: [PATCH 1/3] Documents built-in `beats_admin` role --- docs/en/stack/security/authorization/built-in-roles.asciidoc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/en/stack/security/authorization/built-in-roles.asciidoc b/docs/en/stack/security/authorization/built-in-roles.asciidoc index e2d8c9766..fbcd603eb 100644 --- a/docs/en/stack/security/authorization/built-in-roles.asciidoc +++ b/docs/en/stack/security/authorization/built-in-roles.asciidoc @@ -14,6 +14,9 @@ to users. These roles have a fixed set of privileges and cannot be updated. Grants access necessary for the APM system user to send system-level data (such as monitoring) to {es}. +[[built-in-roles-beats-admin]] `beats_admin` :: +Grants access to the `.management-beats` index for managing configurations. + [[built-in-roles-beats-system]] `beats_system` :: Grants access necessary for the Beats system user to send system-level data (such as monitoring) to {es}. @@ -26,7 +29,6 @@ change between releases. * This role does not provide access to the beats indices and is not suitable for writing beats output to {es}. =============================== - -- [[built-in-roles-ingest-user]] `ingest_admin` :: From 26f67f784cdd7a8af3554099bd887f63feeab653 Mon Sep 17 00:00:00 2001 From: Shaunak Kashyap Date: Tue, 10 Jul 2018 08:19:50 -0700 Subject: [PATCH 2/3] Clarifying purpose of index --- docs/en/stack/security/authorization/built-in-roles.asciidoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/en/stack/security/authorization/built-in-roles.asciidoc b/docs/en/stack/security/authorization/built-in-roles.asciidoc index fbcd603eb..e2b05223c 100644 --- a/docs/en/stack/security/authorization/built-in-roles.asciidoc +++ b/docs/en/stack/security/authorization/built-in-roles.asciidoc @@ -15,7 +15,8 @@ Grants access necessary for the APM system user to send system-level data (such as monitoring) to {es}. [[built-in-roles-beats-admin]] `beats_admin` :: -Grants access to the `.management-beats` index for managing configurations. +Grants access to the `.management-beats` index, which contains configuration +information for the Beats. [[built-in-roles-beats-system]] `beats_system` :: Grants access necessary for the Beats system user to send system-level data @@ -73,7 +74,6 @@ change between releases. * This role does not provide access to the logstash indices and is not suitable for use within a Logstash pipeline. =============================== --- [[built-in-roles-ml-admin]] `machine_learning_admin`:: Grants `manage_ml` cluster privileges and read access to the `.ml-*` indices. From 3a95c75fcd2dbf5a439db50269d56b3621e34661 Mon Sep 17 00:00:00 2001 From: lcawl Date: Wed, 10 Oct 2018 17:45:14 +0100 Subject: [PATCH 3/3] [DOCS] Fixes formatting --- docs/en/stack/security/authorization/built-in-roles.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/en/stack/security/authorization/built-in-roles.asciidoc b/docs/en/stack/security/authorization/built-in-roles.asciidoc index e2b05223c..893ca67b1 100644 --- a/docs/en/stack/security/authorization/built-in-roles.asciidoc +++ b/docs/en/stack/security/authorization/built-in-roles.asciidoc @@ -74,6 +74,7 @@ change between releases. * This role does not provide access to the logstash indices and is not suitable for use within a Logstash pipeline. =============================== +-- [[built-in-roles-ml-admin]] `machine_learning_admin`:: Grants `manage_ml` cluster privileges and read access to the `.ml-*` indices.