From 1ebd2209a3e42a670f1b007f49135dca6a24062a Mon Sep 17 00:00:00 2001 From: Surya Sashank Nistala Date: Wed, 12 Jul 2023 01:14:35 -0700 Subject: [PATCH] add workflow cluster permissions to alerting roles Signed-off-by: Surya Sashank Nistala --- config/roles.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/config/roles.yml b/config/roles.yml index 3814a4fad4..b5827a5eee 100644 --- a/config/roles.yml +++ b/config/roles.yml @@ -28,6 +28,8 @@ alerting_read_access: reserved: true cluster_permissions: - 'cluster:admin/opendistro/alerting/alerts/get' + - 'cluster:admin/opensearch/alerting/workflow/get' + - 'cluster:admin/opensearch/alerting/workflow_alerts/get' - 'cluster:admin/opendistro/alerting/destination/get' - 'cluster:admin/opendistro/alerting/monitor/get' - 'cluster:admin/opendistro/alerting/monitor/search' @@ -38,6 +40,8 @@ alerting_ack_alerts: reserved: true cluster_permissions: - 'cluster:admin/opendistro/alerting/alerts/*' + - 'cluster:admin/opendistro/alerting/workflow_alerts/*' + - 'cluster:admin/opendistro/alerting/chained_alerts/*' # Allows users to use all alerting functionality alerting_full_access: