[8.x] Add restriction to RoleDescriptor (#3142)#3147

pquentin merged 1 commit into8.xelastic/elasticsearch-specification:8.xfrom

backport-3142-to-8.xelastic/elasticsearch-specification:backport-3142-to-8.xCopy head branch name to clipboard