From cee8868fe1104e4de35ba9adb289e4afdb215f0b Mon Sep 17 00:00:00 2001
From: "opensearch-trigger-bot[bot]"
 <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
Date: Mon, 5 Feb 2024 11:55:55 -0500
Subject: [PATCH] [Backport 2.x] Admin role for Query insights plugin (#4022)

Backport 6b9ded21b2b7af18f8bacbcf1b242ffe12960da1 from #4006.

Signed-off-by: Chenyang Ji <cyji@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 config/roles.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/config/roles.yml b/config/roles.yml
index ce9be65883..a8d7ad6793 100644
--- a/config/roles.yml
+++ b/config/roles.yml
@@ -398,3 +398,9 @@ flow_framework_read_access:
     - 'cluster:admin/opensearch/flow_framework/workflow_state/get'
     - 'cluster:admin/opensearch/flow_framework/workflow_state/search'
     - 'cluster:admin/opensearch/flow_framework/workflow_step/get'
+
+# Allows users to use all query insights APIs
+query_insights_full_access:
+  reserved: true
+  cluster_permissions:
+    - 'cluster:admin/opensearch/insights/top_queries/*'