Adds default roles for Snapshot Management plugin (#1897)

Signed-off-by: Clay Downs <[email protected]>
opensearch-project · Jun 23, 2022 · 7f5ca53 · 7f5ca53
1 parent 8393c71
commit 7f5ca53
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/securityconfig/roles.yml b/securityconfig/roles.yml
@@ -227,3 +227,22 @@ notifications_read_access:
  - 'cluster:admin/opensearch/notifications/configs/get'
  - 'cluster:admin/opensearch/notifications/features'
  - 'cluster:admin/opensearch/notifications/channels/get'
+
+# Allows users to use all snapshot management functionality
+snapshot_management_full_access:
+ reserved: true
+ cluster_permissions:
+ - 'cluster:admin/opensearch/snapshot_management/*'
+ - 'cluster:admin/opensearch/notifications/feature/publish'
+ - 'cluster:admin/repository/*'
+ - 'cluster:admin/snapshot/*'
+
+# Allows users to see snapshots, repositories, and snapshot management policies
+snapshot_management_read_access:
+ reserved: true
+ cluster_permissions:
+ - 'cluster:admin/opensearch/snapshot_management/policy/get'
+ - 'cluster:admin/opensearch/snapshot_management/policy/search'
+ - 'cluster:admin/opensearch/snapshot_management/policy/explain'
+ - 'cluster:admin/repository/get'
+ - 'cluster:admin/snapshot/get'