elasticsearch-authz

Elasticsearch role-based access control for native users is managed by creating, updating, enabling, disabling, and deleting users via Elasticsearch and Kibana APIs. This Skill automates defining granular roles with specific index, cluster, and Kibana feature privileges.

Document-level security (DLS) and field-level security (FLS) in Elasticsearch restrict data access at a granular level. This Skill implements DLS and FLS to ensure users can only view permitted documents and non-sensitive fields, supporting attribute-based access control (ABAC) through templated DLS queries.

Yes, you can map Elasticsearch roles to external authentication realms like LDAP and SAML. This Skill manages role mappings by assigning roles to users from external realms based on defined rules, integrating external identity providers into your Elasticsearch security configuration.

Yes, this Elasticsearch RBAC management works with self-managed, ECH, and Serverless deployments. It supports creation, updates, and deletion of security entities across these environments using both Elasticsearch and Kibana APIs for comprehensive access control.

The best way to restrict viewing sensitive PII fields in Kibana dashboards is by applying field-level security (FLS). This Skill automates creating roles that grant read-only access to specific log indices while blocking sensitive fields for Kibana viewers.

You need attribute-based access control (ABAC) with templated DLS queries in Elasticsearch when document access must dynamically depend on user attributes. This Skill enables ABAC by integrating templated DLS queries into role definitions for fine-grained, context-aware data filtering.