Learning Elastic Stack 6.0

User authorization

Once the user is successfully authenticated, the authorization process kicks in. Authorization determines whether the user behind the request has enough permissions to execute a particular request.

In X-Pack security, Secured Resources are the foundation of user-based security. A secured resource is a resource that needs access, such as indexes, documents, fields or access, to perform Elasticsearch cluster operations. X-Pack Security enables authorization by assigning permissions to roles that are assigned to users. A permission is one or more privileges against a secured resource. A privilege is a named group representing one or more actions that a user may execute against a secured resource. A user can have one or more ...