[Backport 2.x] add workflow cluster permissions to alerting roles (#3039

) Backport 59e2657 from #2994 Co-authored-by: Surya Sashank Nistala <[email protected]> Co-authored-by: Craig Perkins <[email protected]>
opensearch-project · Aug 1, 2023 · 2fb1802 · 2fb1802
1 parent f97c044
commit 2fb1802
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/roles.yml b/config/roles.yml
@@ -32,12 +32,16 @@ alerting_read_access:
     - 'cluster:admin/opendistro/alerting/monitor/get'
     - 'cluster:admin/opendistro/alerting/monitor/search'
     - 'cluster:admin/opensearch/alerting/findings/get'
+    - 'cluster:admin/opensearch/alerting/workflow/get'
+    - 'cluster:admin/opensearch/alerting/workflow_alerts/get'
 
 # Allows users to view and acknowledge alerts
 alerting_ack_alerts:
   reserved: true
   cluster_permissions:
     - 'cluster:admin/opendistro/alerting/alerts/*'
+    - 'cluster:admin/opendistro/alerting/chained_alerts/*'
+    - 'cluster:admin/opendistro/alerting/workflow_alerts/*'
 
 # Allows users to use all alerting functionality
 alerting_full_access: