Documentation regarding permissions needed to use SLM wizard in Kibana

[joshjanoski]

I wanted to request an update to the documentation for the Snapshot Lifecycle Management in Kibana. I was trying to create a role that would allow a user to only access the SLM wizard and view, create, and edit SLM policies. I found that there wasn't clear documentation on how to do this correctly.

The documentation here: https://www.elastic.co/guide/en/kibana/7.6/snapshot-repositories.html doesn't have any information regarding what permissions are needed, and the documentation here: https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshot-lifecycle-management.html covers the permissions needed if you are just using the API, but they don't cover the permissions needed for the Kibana wizard.

I discovered through trial and error that these are the permissions needed:

PUT _security/role/slm_admin
{
  "cluster": [
    "monitor",
    "manage_slm",
    "cluster:admin/snapshot",
    "cluster:admin/repository"
  ],
  "indices": [
    {
      "names": [
        "monitor"
      ],
      "privileges": [
        "all"
      ],
      "field_security": {
        "grant": [
          "*"
        ],
        "except": []
      },
      "allow_restricted_indices": false
    }
  ],
  "applications": [
    {
      "application": "kibana-.kibana",
      "privileges": [
        "feature_advancedSettings.read"
      ],
      "resources": [
        "space:default"
      ]
    }
  ],
  "run_as": [],
  "metadata": {},
  "transient_metadata": {
    "enabled": true
  }
}

The above permissions allowed me to log into Kibana, access the Advanced Settings section, and view, create, and edit SLM policies. I wanted to see if we could get these permissions documented so that it is clear what permissions are needed for the wizard. Thank you for considering this update!

[elasticmachine]

Pinging @elastic/kibana-docs (Team:Docs)