elasticsearch-authz

What problem does it solve?

This Skill simplifies the complex task of managing Elasticsearch Role-Based Access Control (RBAC), ensuring users have the correct permissions without over-provisioning access.

Core Features & Use Cases

• User Management: Create, update, enable, disable, and delete native Elasticsearch users.
• Role Management: Define granular roles with specific index, cluster, and Kibana feature privileges. Supports both Elasticsearch and Kibana APIs for role creation.
• Role Mappings: Assign roles to users from external realms like LDAP and SAML based on defined rules.
• Advanced Security: Implement Document-Level Security (DLS) and Field-Level Security (FLS) for fine-grained data access control, including attribute-based access control (ABAC) with templated queries.
• Use Case: A security administrator needs to grant a new team read-only access to specific log indices and allow them to view dashboards in Kibana, while ensuring they cannot see sensitive PII fields. This Skill can automate the creation of the necessary role and user.

Quick Start

Use the elasticsearch-authz skill to create a new user named 'auditor' with read-only access to all indices.