Permissions

This page is a complete list of available permissions in the security plugin. Each permission controls access to a data type or API.

Rather than creating new action groups from individual permissions, you can often achieve your desired security posture using some combination of the default action groups. To learn more, see Default Action Groups.

Cluster

  • cluster:admin/ingest/pipeline/delete
  • cluster:admin/ingest/pipeline/get
  • cluster:admin/ingest/pipeline/put
  • cluster:admin/ingest/pipeline/simulate
  • cluster:admin/ingest/processor/grok/get
  • cluster:admin/opensearch/ad/detector/delete
  • cluster:admin/opensearch/ad/detector/jobmanagement
  • cluster:admin/opensearch/ad/detector/run
  • cluster:admin/opensearch/ad/detector/search
  • cluster:admin/opensearch/ad/detector/stats
  • cluster:admin/opensearch/ad/detector/write
  • cluster:admin/opensearch/ad/detectors/get
  • cluster:admin/opensearch/ad/result/search
  • cluster:admin/opensearch/alerting/alerts/ack
  • cluster:admin/opensearch/alerting/alerts/get
  • cluster:admin/opensearch/alerting/destination/delete
  • cluster:admin/opensearch/alerting/destination/email_account/delete
  • cluster:admin/opensearch/alerting/destination/email_account/get
  • cluster:admin/opensearch/alerting/destination/email_account/search
  • cluster:admin/opensearch/alerting/destination/email_account/write
  • cluster:admin/opensearch/alerting/destination/email_group/delete
  • cluster:admin/opensearch/alerting/destination/email_group/get
  • cluster:admin/opensearch/alerting/destination/email_group/search
  • cluster:admin/opensearch/alerting/destination/email_group/write
  • cluster:admin/opensearch/alerting/destination/get
  • cluster:admin/opensearch/alerting/destination/write
  • cluster:admin/opensearch/alerting/monitor/delete
  • cluster:admin/opensearch/alerting/monitor/execute
  • cluster:admin/opensearch/alerting/monitor/get
  • cluster:admin/opensearch/alerting/monitor/search
  • cluster:admin/opensearch/alerting/monitor/write
  • cluster:admin/opensearch/asynchronous_search/stats
  • cluster:admin/opensearch/asynchronous_search/delete
  • cluster:admin/opensearch/asynchronous_search/get
  • cluster:admin/opensearch/asynchronous_search/submit
  • cluster:admin/opensearch/reports/definition/create
  • cluster:admin/opensearch/reports/definition/delete
  • cluster:admin/opensearch/reports/definition/get
  • cluster:admin/opensearch/reports/definition/list
  • cluster:admin/opensearch/reports/definition/on_demand
  • cluster:admin/opensearch/reports/definition/update
  • cluster:admin/opensearch/reports/instance/get
  • cluster:admin/opensearch/reports/instance/list
  • cluster:admin/opensearch/reports/menu/download
  • cluster:admin/reindex/rethrottle
  • cluster:admin/repository/delete
  • cluster:admin/repository/get
  • cluster:admin/repository/put
  • cluster:admin/repository/verify
  • cluster:admin/reroute
  • cluster:admin/script/delete
  • cluster:admin/script/get
  • cluster:admin/script/put
  • cluster:admin/settings/update
  • cluster:admin/snapshot/create
  • cluster:admin/snapshot/delete
  • cluster:admin/snapshot/get
  • cluster:admin/snapshot/restore
  • cluster:admin/snapshot/status
  • cluster:admin/snapshot/status*
  • cluster:admin/tasks/cancel
  • cluster:admin/tasks/test
  • cluster:admin/tasks/testunblock
  • cluster:monitor/allocation/explain
  • cluster:monitor/health
  • cluster:monitor/main
  • cluster:monitor/nodes/hot_threads
  • cluster:monitor/nodes/info
  • cluster:monitor/nodes/liveness
  • cluster:monitor/nodes/stats
  • cluster:monitor/nodes/usage
  • cluster:monitor/remote/info
  • cluster:monitor/state
  • cluster:monitor/stats
  • cluster:monitor/task
  • cluster:monitor/task/get
  • cluster:monitor/tasks/list

Indices

  • indices:admin/aliases
  • indices:admin/aliases/exists
  • indices:admin/aliases/get
  • indices:admin/analyze
  • indices:admin/cache/clear
  • indices:admin/close
  • indices:admin/create
  • indices:admin/delete
  • indices:admin/exists
  • indices:admin/flush
  • indices:admin/flush*
  • indices:admin/forcemerge
  • indices:admin/get
  • indices:admin/mapping/put
  • indices:admin/mappings/fields/get
  • indices:admin/mappings/fields/get*
  • indices:admin/mappings/get
  • indices:admin/open
  • indices:admin/refresh
  • indices:admin/refresh*
  • indices:admin/resolve/index
  • indices:admin/rollover
  • indices:admin/seq_no/global_checkpoint_sync
  • indices:admin/settings/update
  • indices:admin/shards/search_shards
  • indices:admin/shrink
  • indices:admin/synced_flush
  • indices:admin/template/delete
  • indices:admin/template/get
  • indices:admin/template/put
  • indices:admin/types/exists
  • indices:admin/upgrade
  • indices:admin/validate/query
  • indices:data/read/explain
  • indices:data/read/field_caps
  • indices:data/read/field_caps*
  • indices:data/read/get
  • indices:data/read/mget
  • indices:data/read/mget*
  • indices:data/read/msearch
  • indices:data/read/msearch/template
  • indices:data/read/mtv
  • indices:data/read/mtv*
  • indices:data/read/scroll
  • indices:data/read/scroll/clear
  • indices:data/read/search
  • indices:data/read/search*
  • indices:data/read/search/template
  • indices:data/read/tv
  • indices:data/write/bulk
  • indices:data/write/bulk*
  • indices:data/write/delete
  • indices:data/write/delete/byquery
  • indices:data/write/index
  • indices:data/write/reindex
  • indices:data/write/update
  • indices:data/write/update/byquery
  • indices:monitor/recovery
  • indices:monitor/segments
  • indices:monitor/settings/get
  • indices:monitor/shard_stores
  • indices:monitor/stats
  • indices:monitor/upgrade