diff --git a/x-pack/docs/en/security/authorization/built-in-roles.asciidoc b/x-pack/docs/en/security/authorization/built-in-roles.asciidoc index 096696c0f36d9..513576dee4eb7 100644 --- a/x-pack/docs/en/security/authorization/built-in-roles.asciidoc +++ b/x-pack/docs/en/security/authorization/built-in-roles.asciidoc @@ -183,8 +183,9 @@ However, this role does not grant permission to view the data in all indices. [[built-in-roles-watcher-admin]] `watcher_admin`:: + -Grants read access to the `.watches` index, read access to the watch history and -the triggered watches index and allows to execute all watcher actions. +Allows users to create and execute all {watcher} actions. Grants read access to +the `.watches` index. Also grants read access to the watch history and the +triggered watches index. [[built-in-roles-watcher-user]] `watcher_user`:: +