Skip to content

Commit 2950129

Browse files
committed
Fix ML built in role docs (#246)
The ML built in roles were adjusted in 6.6 because: 1. We added a .ml-config index that we do not want any user to access directly 2. We added a .ml-annotations index that users as well as admins require write access to
1 parent d5232b2 commit 2950129

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

docs/en/stack/security/authorization/built-in-roles.asciidoc

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -78,13 +78,15 @@ suitable for use within a Logstash pipeline.
7878
--
7979

8080
[[built-in-roles-ml-admin]] `machine_learning_admin`::
81-
Grants `manage_ml` cluster privileges and read access to the `.ml-*` indices.
81+
Grants `manage_ml` cluster privileges, read access to `.ml-anomalies*`,
82+
`.ml-notifications*`, `.ml-state*`, `.ml-meta*` indices and write access to
83+
`.ml-annotations*` indices.
8284

8385
[[built-in-roles-ml-user]] `machine_learning_user`::
8486
Grants the minimum privileges required to view {ml} configuration,
85-
status, and results. This role grants `monitor_ml` cluster privileges and
86-
read access to the `.ml-notifications` and `.ml-anomalies*` indices,
87-
which store {ml} results.
87+
status, and work with results. This role grants `monitor_ml` cluster privileges,
88+
read access to the `.ml-notifications` and `.ml-anomalies*` indices
89+
(which store {ml} results), and write access to `.ml-annotations*` indices.
8890

8991
[[built-in-roles-monitoring-user]] `monitoring_user`::
9092
Grants the minimum privileges required for any user of {monitoring} other than those

0 commit comments

Comments
 (0)