2.0 KiB
2.0 KiB
Interface SecurityRoleDescriptor
| Name | Type | Description |
|---|---|---|
applications |
SecurityApplicationPrivileges[] | A list of application privilege entries |
cluster |
SecurityClusterPrivilege[] | A list of cluster privileges. These privileges define the cluster level actions that API keys are able to execute. |
description |
string | Optional description of the role descriptor |
global |
SecurityGlobalPrivilege[] | SecurityGlobalPrivilege |
index |
SecurityIndicesPrivileges[] | A list of indices permissions entries. indices |
indices |
SecurityIndicesPrivileges[] | A list of indices permissions entries. |
metadata |
Metadata | Optional meta-data. Within the metadata object, keys that begin with _ are reserved for system usage. |
remote_cluster |
SecurityRemoteClusterPrivileges[] | A list of cluster permissions for remote clusters. NOTE: This is limited a subset of the cluster permissions. |
remote_indices |
SecurityRemoteIndicesPrivileges[] | A list of indices permissions for remote clusters. |
restriction |
SecurityRestriction | Restriction for when the role descriptor is allowed to be effective. |
run_as |
string[] | A list of users that the API keys can impersonate. NOTE: In Elastic Cloud Serverless, the run-as feature is disabled. For API compatibility, you can still specify an empty run_as field, but a non-empty list will be rejected. |
transient_metadata |
Record<string, any> |