add workflow cluster permissions to alerting roles (opensearch-projec…

…t#2994) * add workflow cluster permissions to alerting roles Signed-off-by: Surya Sashank Nistala <[email protected]> * fix ordering of new cluster permissions in roles.yml Signed-off-by: Surya Sashank Nistala <[email protected]> --------- Signed-off-by: Surya Sashank Nistala <[email protected]>
peternied · Jul 21, 2023 · 59e2657 · 59e2657
1 parent ab6778d
commit 59e2657
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/roles.yml b/config/roles.yml
@@ -32,12 +32,16 @@ alerting_read_access:
     - 'cluster:admin/opendistro/alerting/monitor/get'
     - 'cluster:admin/opendistro/alerting/monitor/search'
     - 'cluster:admin/opensearch/alerting/findings/get'
+    - 'cluster:admin/opensearch/alerting/workflow/get'
+    - 'cluster:admin/opensearch/alerting/workflow_alerts/get'
 
 # Allows users to view and acknowledge alerts
 alerting_ack_alerts:
   reserved: true
   cluster_permissions:
     - 'cluster:admin/opendistro/alerting/alerts/*'
+    - 'cluster:admin/opendistro/alerting/chained_alerts/*'
+    - 'cluster:admin/opendistro/alerting/workflow_alerts/*'
 
 # Allows users to use all alerting functionality
 alerting_full_access: