update scripts roles to include maintenance for roles that do not hav…

…e privileges higher than 'maintenance'
elastic · Jan 11, 2021 · a4000f4 · a4000f4
1 parent 9f4d359
commit a4000f4
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/...rity_solution/server/lib/detection_engine/scripts/roles_users/reader/detections_role.json b/...rity_solution/server/lib/detection_engine/scripts/roles_users/reader/detections_role.json
@@ -14,7 +14,7 @@
         "names": [
           "*"
         ],
-        "privileges": ["read", "view_index_metadata"]
+        "privileges": ["read", "maintenance", "view_index_metadata"]
       }
     ]
   },

diff --git a/...solution/server/lib/detection_engine/scripts/roles_users/rule_author/detections_role.json b/...solution/server/lib/detection_engine/scripts/roles_users/rule_author/detections_role.json
@@ -18,7 +18,7 @@
       },
       {
         "names": [".siem-signals-*"],
-        "privileges": ["read", "write", "view_index_metadata"]
+        "privileges": ["read", "write", "maintenance", "view_index_metadata"]
       }
     ]
   },

diff --git a/..._solution/server/lib/detection_engine/scripts/roles_users/t1_analyst/detections_role.json b/..._solution/server/lib/detection_engine/scripts/roles_users/t1_analyst/detections_role.json
@@ -2,7 +2,7 @@
   "elasticsearch": {
     "cluster": [],
     "indices": [
-      { "names": [".siem-signals-*"], "privileges": ["read", "write"] },
+      { "names": [".siem-signals-*"], "privileges": ["read", "write", "maintenance"] },
       {
         "names": [
           "apm-*-transaction*",

diff --git a/..._solution/server/lib/detection_engine/scripts/roles_users/t2_analyst/detections_role.json b/..._solution/server/lib/detection_engine/scripts/roles_users/t2_analyst/detections_role.json
@@ -2,7 +2,7 @@
   "elasticsearch": {
     "cluster": [],
     "indices": [
-      { "names": [".siem-signals-*"], "privileges": ["read", "write"] },
+      { "names": [".siem-signals-*"], "privileges": ["read", "write", "maintenance"] },
       {
         "names": [
           ".lists*",
-Original file line number
+Diff line change
@@ Expand Up / @@ -14,7 +14,7 @@ @@
             "names": [
               "*"
             ],
-            "privileges": ["read", "view_index_metadata"]
+            "privileges": ["read", "maintenance", "view_index_metadata"]
           }
         ]
       },
@@ Expand Down @@