Skip to content

[DOCS] Add serverless details in Elasticsearch security privileges #109718

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jul 3, 2024

Conversation

lcawl
Copy link
Contributor

@lcawl lcawl commented Jun 13, 2024

Relates to elastic/elasticsearch-specification#2491

This PR updates https://www.elastic.co/guide/en/elasticsearch/reference/current/security-privileges.html to call out the specific privileges that are not available in serverless projects.

@lcawl lcawl added >docs General docs changes :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC labels Jun 13, 2024
Copy link
Contributor

Documentation preview:

Copy link
Contributor

@n1v0lg n1v0lg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm ++ on documenting privilege availability here.

Left a comment around the behavioral privileges (I can address it in a follow up PR). There are a couple more cluster privileges missing:

  • delegate_pki
  • manage_user_profile
  • monitor_data_frame_transform <- this is deprecated anyhow. fine to leave out
  • none
  • read/write connector/fleet secrets

I'll take an action item to add the ones that are worth adding in a follow up. Let me know if you had more changes planned here, otherwise I can give it one more review (this basically looks ready to merge from my perspective).

@lcawl lcawl marked this pull request as ready for review July 2, 2024 15:57
@elasticsearchmachine elasticsearchmachine added Team:Docs Meta label for docs team Team:Security Meta label for security team labels Jul 2, 2024
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-docs (Team:Docs)

@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@n1v0lg n1v0lg self-requested a review July 3, 2024 12:18
Copy link
Contributor

@n1v0lg n1v0lg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Just a short note on a display glitch we gotta address, all good to merge without re-review though.

@lcawl lcawl merged commit 748dbd5 into elastic:main Jul 3, 2024
5 checks passed
@lcawl lcawl deleted the serverless-security-privileges branch July 3, 2024 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>docs General docs changes :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Docs Meta label for docs team Team:Security Meta label for security team v8.15.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants