---
_meta:
  type: "roles"
  config_version: 2
opendistro_security_unittest_1:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "*"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "*"
  tenant_permissions: []
opendistro_security_role_starfleet_library:
  reserved: true
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions: []
  index_permissions:
    - index_patterns:
        - "abc*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []

opendistro_security_hidden:
  reserved: false
  hidden: true
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "OPENDISTRO_SECURITY_CLUSTER_ALL"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_reserved:
  reserved: true
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "OPENDISTRO_SECURITY_CLUSTER_ALL"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
opendistro_security_internal:
  reserved: false
  hidden: true
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "OPENDISTRO_SECURITY_CLUSTER_ALL"
  index_permissions:
    - index_patterns:
        - "abc*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_role_klingons1:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions: []
  index_permissions:
    - index_patterns:
        - "klingonempire"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "READ_UT"
  tenant_permissions: []
opendistro_security_role_klingons2:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions: []
  index_permissions:
    - index_patterns:
        - "klingonempire"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "READ_UT"
  tenant_permissions: []
opendistro_security_kibana4:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "cluster:monitor/health"
    - "cluster:monitor/nodes/info"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "indices:admin/get"
        - "indices:admin/mappings/fields/get"
        - "indices:admin/validate/query"
        - "indices:data/read/msearch"
        - "indices:data/read/search-"
    - index_patterns:
        - "?kibana"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "indices:data/write/index"
        - "indices:data/write/delete"
        - "indices:data/write/update"
        - "indices:admin/mapping/put"
        - "indices:data/read/get"
        - "indices:admin/refresh"
        - "indices:admin/validate/query"
        - "indices:data/read/search"
        - "indices:admin/mappings/fields/get"
        - "indices:admin/exists"
        - "indices:data/read/mget"
  tenant_permissions: []
opendistro_security_theindex_admin:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions: []
  index_permissions:
    - index_patterns:
        - "theindex"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_power_user:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "OPENDISTRO_SECURITY_CLUSTER_MONITOR"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_transport_client:
  reserved: true
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "cluster:monitor/nodes/liveness"
  index_permissions: []
  tenant_permissions: []
opendistro_security_remote_marvel_agent:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "indices:admin/template/get"
    - "indices:admin/template/put"
  index_permissions:
    - index_patterns:
        - "?marvel-opensearch-*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_zdummy_all:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "cluster:*"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_admin:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "OPENDISTRO_SECURITY_CLUSTER_ALL"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_all_access:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "cluster:*"
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "ALL"
  tenant_permissions: []
opendistro_security_marvel_user:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions: []
  index_permissions:
    - index_patterns:
        - "?marvel-opensearch-*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "READ_UT"
    - index_patterns:
        - "?kibana"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "indices:data/read/get"
        - "indices:admin/validate/query"
        - "indices:data/read/search"
        - "indices:admin/mappings/fields/get"
        - "indices:admin/exists"
        - "indices:data/read/mget"
  tenant_permissions: []
opendistro_security_logstash:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "indices:admin/template/get"
    - "indices:admin/template/put"
  index_permissions:
    - index_patterns:
        - "logstash-*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "OPENDISTRO_SECURITY_CREATE_INDEX"
        - "indices:data/read/scroll"
        - "indices:data/read/search"
        - "indices:data/write/bulk"
        - "indices:data/write/delete"
        - "indices:data/write/update"
  tenant_permissions: []
opendistro_security_flsdls:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "*"
  index_permissions:
    - index_patterns:
        - "*"
      dls: "{\"term\" : {\"_type\" : \"legends\"}}"
      fls:
        - "fieldx"
        - "field2.b"
        - "field3.m.*"
      masked_fields: null
      allowed_actions:
        - "*"
  tenant_permissions: []
opendistro_security_user:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions: []
  index_permissions:
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "READ_UT"
  tenant_permissions: []
opendistro_security_kibana4_server:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "cluster:monitor/health"
    - "cluster:monitor/nodes/info"
  index_permissions:
    - index_patterns:
        - "?kibana"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "indices:admin/create"
        - "indices:admin/exists"
        - "indices:admin/mapping/put"
        - "indices:admin/mappings/fields/get"
        - "indices:admin/refresh"
        - "indices:admin/validate/query"
        - "indices:data/read/get"
        - "indices:data/read/mget"
        - "indices:data/read/search"
        - "indices:data/write/delete"
        - "indices:data/write/index"
        - "indices:data/write/update"
  tenant_permissions: []
opendistro_security_role_starfleet:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "*bulk*"
    - "cluster:monitor*"
    - "indices:data/read/scroll"
  index_permissions:
    - index_patterns:
        - "sf"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "*bulk*"
        - "READ_UT"
    - index_patterns:
        - "*"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "READ_UT"
  tenant_permissions: []
opendistro_security_role_starfleet_captains:
  reserved: false
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
    - "*bulk*"
    - "cluster:monitor*"
  index_permissions:
    - index_patterns:
        - "sf"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "CRUD_UT"
    - index_patterns:
        - "public"
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
        - "CRUD_UT"
  tenant_permissions: []
rest_api_admin_full_access:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/actiongroups'
    - 'restapi:admin/allowlist'
    - 'restapi:admin/internalusers'
    - 'restapi:admin/nodesdn'
    - 'restapi:admin/roles'
    - 'restapi:admin/rolesmapping'
    - 'restapi:admin/ssl/certs/info'
    - 'restapi:admin/ssl/certs/reload'
    - 'restapi:admin/tenants'
rest_api_admin_actiongroups_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/actiongroups'
rest_api_admin_allowlist_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/allowlist'
rest_api_admin_internalusers_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/internalusers'
rest_api_admin_nodesdn_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/nodesdn'
rest_api_admin_roles_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/roles'
rest_api_admin_rolesmapping_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/rolesmapping'
rest_api_admin_ssl_info_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/ssl/certs/info'
rest_api_admin_ssl_reloadcerts_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/ssl/certs/reload'
rest_api_admin_tenants_only:
  reserved: true
  cluster_permissions:
    - 'restapi:admin/tenants'