Skip to content

Add Kibana application privileges to the reserved role docs#354

Merged
droberts195 merged 2 commits intoelastic:masterfrom
droberts195:add_kibana_app_privs
Jun 5, 2019
Merged

Add Kibana application privileges to the reserved role docs#354
droberts195 merged 2 commits intoelastic:masterfrom
droberts195:add_kibana_app_privs

Conversation

@droberts195
Copy link
Copy Markdown

Users who create roles that are similar to the reserved roles
need to know about these.

The privileges were added to the reserved roles in
elastic/elasticsearch#40651 and elastic/elasticsearch#42757

Users who create roles that are similar to the reserved roles
need to know about these.

The privileges were added to the reserved roles in
elastic/elasticsearch#40651 and elastic/elasticsearch#42757
[[built-in-roles-data-frame-transforms-admin]] `data_frame_transforms_admin` ::
Grants `manage_data_frame_transforms` cluster privileges, which enable you to
manage data frames.
manage data frame transforms. This role also includes the `reserved_ml` {kib}
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kobelb will this level of Kibana privilege be documented anywhere? It doesn't seem we go into that level of detail in https://www.elastic.co/guide/en/kibana/master/kibana-privileges.html so maybe we should omit it here too? e.g. Change it to something like "Users with this role have all {ml} feature privileges in Kibana".

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point... we've generally hidden the concept of "Kibana reserved privileges" from end-users, so the phrasing which you've recommended might make this less confusing to users.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @kobelb ! @droberts195 I've drafted suggestions for the changes.

Co-Authored-By: Lisa Cawley <lcawley@elastic.co>
Copy link
Copy Markdown
Contributor

@lcawl lcawl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@droberts195 droberts195 merged commit 2971dde into elastic:master Jun 5, 2019
@droberts195 droberts195 deleted the add_kibana_app_privs branch June 5, 2019 15:31
droberts195 added a commit that referenced this pull request Jun 5, 2019
Users who create roles that are similar to the reserved roles
need to know about these.

The privileges were added to the reserved roles in
elastic/elasticsearch#40651 and elastic/elasticsearch#42757

Co-Authored-By: Lisa Cawley <lcawley@elastic.co>
droberts195 added a commit that referenced this pull request Jun 5, 2019
Users who create roles that are similar to the reserved roles
need to know about these.

The privileges were added to the reserved roles in
elastic/elasticsearch#40651 and elastic/elasticsearch#42757

Co-Authored-By: Lisa Cawley <lcawley@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants