OPENDISTRO_SECURITY_UNLIMITED:
  readonly: true
  permissions:
    - "*"

###### INDEX LEVEL ######

OPENDISTRO_SECURITY_INDICES_ALL:
  readonly: true
  permissions:
    - "indices:*"

# for backward compatibility
ALL:
  readonly: true
  permissions:
    - INDICES_ALL

OPENDISTRO_SECURITY_MANAGE:
  readonly: true
  permissions:
    - "indices:monitor/*"
    - "indices:admin/*"

OPENDISTRO_SECURITY_CREATE_INDEX:
  readonly: true
  permissions:
    - "indices:admin/create"
    - "indices:admin/mapping/put"

OPENDISTRO_SECURITY_MANAGE_ALIASES:
  readonly: true
  permissions:
    - "indices:admin/aliases*"

# for backward compatibility
MONITOR:
  readonly: true
  permissions:
    - INDICES_MONITOR

OPENDISTRO_SECURITY_INDICES_MONITOR:
  readonly: true
  permissions:
    - "indices:monitor/*"

OPENDISTRO_SECURITY_DATA_ACCESS:
  readonly: true
  permissions:
    - "indices:data/*"
    - CRUD

OPENDISTRO_SECURITY_WRITE:
  readonly: true
  permissions:
    - "indices:data/write*"
    - "indices:admin/mapping/put"

OPENDISTRO_SECURITY_READ:
  readonly: true
  permissions:
    - "indices:data/read*"
    - "indices:admin/mappings/fields/get*"

OPENDISTRO_SECURITY_DELETE:
  readonly: true
  permissions:
    - "indices:data/write/delete*"

OPENDISTRO_SECURITY_CRUD:
  readonly: true
  permissions:
    - READ
    - WRITE

OPENDISTRO_SECURITY_SEARCH:
  readonly: true
  permissions:
    - "indices:data/read/search*"
    - "indices:data/read/msearch*"
    - SUGGEST

OPENDISTRO_SECURITY_SUGGEST:
  readonly: true
  permissions:
    - "indices:data/read/suggest*"

OPENDISTRO_SECURITY_INDEX:
  readonly: true
  permissions:
    - "indices:data/write/index*"
    - "indices:data/write/update*"
    - "indices:admin/mapping/put"
    - "indices:data/write/bulk*"

OPENDISTRO_SECURITY_GET:
  readonly: true
  permissions:
    - "indices:data/read/get*"
    - "indices:data/read/mget*"

###### CLUSTER LEVEL ######

OPENDISTRO_SECURITY_CLUSTER_ALL:
  readonly: true
  permissions:
    - "cluster:*"

OPENDISTRO_SECURITY_CLUSTER_MONITOR:
  readonly: true
  permissions:
    - "cluster:monitor/*"

OPENDISTRO_SECURITY_CLUSTER_COMPOSITE_OPS_RO:
  readonly: true
  permissions:
    - "indices:data/read/mget"
    - "indices:data/read/msearch"
    - "indices:data/read/mtv"
    - "indices:admin/aliases/exists*"
    - "indices:admin/aliases/get*"
    - "indices:data/read/scroll"

OPENDISTRO_SECURITY_CLUSTER_COMPOSITE_OPS:
  readonly: true
  permissions:
    - "indices:data/write/bulk"
    - "indices:admin/aliases*"
    - "indices:data/write/reindex"
    - CLUSTER_COMPOSITE_OPS_RO

OPENDISTRO_SECURITY_MANAGE_SNAPSHOTS:
  readonly: true
  permissions:
    - "cluster:admin/snapshot/*"
    - "cluster:admin/repository/*"