Admin role for Query insights plugin (#4006)

Signed-off-by: Chenyang Ji <cyji@amazon.com> (cherry picked from commit 6b9ded2) Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
opensearch-project · Feb 5, 2024 · 9dda824 · 9dda824
1 parent 7977b40
commit 9dda824
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/config/roles.yml b/config/roles.yml
@@ -398,3 +398,9 @@ flow_framework_read_access:
     - 'cluster:admin/opensearch/flow_framework/workflow_state/get'
     - 'cluster:admin/opensearch/flow_framework/workflow_state/search'
     - 'cluster:admin/opensearch/flow_framework/workflow_step/get'
+
+# Allows users to use all query insights APIs
+query_insights_full_access:
+  reserved: true
+  cluster_permissions:
+    - 'cluster:admin/opensearch/insights/top_queries/*'