Moved index_template permission to cluster section (#2964) (#2975)

* Moved index_template permission to cluster section Moved index_template permissions from index section to cluster section to avoid confusion when generating roles Signed-off-by: Fran Moya <[email protected]> * Update _security/access-control/permissions.md Co-authored-by: kolchfa-aws <[email protected]> --------- Signed-off-by: Fran Moya <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]> Co-authored-by: kolchfa-aws <[email protected]> (cherry picked from commit d22a534) Co-authored-by: Fran Moya <[email protected]>
opensearch-project · Feb 20, 2023 · 6e7ff93 · 6e7ff93
1 parent 84ed764
commit 6e7ff93
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/_security/access-control/permissions.md b/_security/access-control/permissions.md
@@ -178,6 +178,14 @@ These permissions are for the cluster and can't be applied granularly. For examp
 - cluster:monitor/task/get
 - cluster:monitor/tasks/list
 
+The following permissions are for indexes but apply globally to the cluster:
+
+- indices:admin/index_template/delete
+- indices:admin/index_template/get
+- indices:admin/index_template/put
+- indices:admin/index_template/simulate
+- indices:admin/index_template/simulate_index
+
 
 ## Index permissions
 
@@ -200,11 +208,6 @@ These permissions apply to an index or index pattern. You might want a user to h
 - indices:admin/flush*
 - indices:admin/forcemerge
 - indices:admin/get (retrieve index and mapping)
-- indices:admin/index_template/delete
-- indices:admin/index_template/get
-- indices:admin/index_template/put
-- indices:admin/index_template/simulate
-- indices:admin/index_template/simulate_index
 - indices:admin/mapping/put
 - indices:admin/mappings/fields/get
 - indices:admin/mappings/fields/get*