From 043360cb6894c5bbd3e62971cf9a421992901450 Mon Sep 17 00:00:00 2001 From: Darshit Chanpura <35282393+DarshitChanpura@users.noreply.github.com> Date: Mon, 27 Jun 2022 15:12:46 -0400 Subject: [PATCH] Adds default roles for Snapshot Management plugin (#1897) (#1916) Signed-off-by: Clay Downs (cherry picked from commit 7f5ca536da4599e4ad2d22ba05af0e33bf107fee) Co-authored-by: Clay Downs --- config/roles.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/config/roles.yml b/config/roles.yml index 09c943dace..721349c086 100644 --- a/config/roles.yml +++ b/config/roles.yml @@ -227,3 +227,22 @@ notifications_read_access: - 'cluster:admin/opensearch/notifications/configs/get' - 'cluster:admin/opensearch/notifications/features' - 'cluster:admin/opensearch/notifications/channels/get' + +# Allows users to use all snapshot management functionality +snapshot_management_full_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opensearch/snapshot_management/*' + - 'cluster:admin/opensearch/notifications/feature/publish' + - 'cluster:admin/repository/*' + - 'cluster:admin/snapshot/*' + +# Allows users to see snapshots, repositories, and snapshot management policies +snapshot_management_read_access: + reserved: true + cluster_permissions: + - 'cluster:admin/opensearch/snapshot_management/policy/get' + - 'cluster:admin/opensearch/snapshot_management/policy/search' + - 'cluster:admin/opensearch/snapshot_management/policy/explain' + - 'cluster:admin/repository/get' + - 'cluster:admin/snapshot/get'