diff --git a/docs/reference/rest-api/security/get-service-accounts.asciidoc b/docs/reference/rest-api/security/get-service-accounts.asciidoc index 3a14278fb4cfb..74f98f2602e34 100644 --- a/docs/reference/rest-api/security/get-service-accounts.asciidoc +++ b/docs/reference/rest-api/security/get-service-accounts.asciidoc @@ -250,7 +250,8 @@ GET /_security/service/elastic/fleet-server "monitor", "create_index", "auto_configure", - "maintenance" + "maintenance", + "view_index_metadata" ], "allow_restricted_indices": false }, @@ -265,7 +266,8 @@ GET /_security/service/elastic/fleet-server "monitor", "create_index", "auto_configure", - "maintenance" + "maintenance", + "view_index_metadata" ], "allow_restricted_indices": false } diff --git a/x-pack/plugin/security/qa/service-account/src/javaRestTest/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountIT.java b/x-pack/plugin/security/qa/service-account/src/javaRestTest/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountIT.java index 595d48ea92a44..b7fb8c37f4c45 100644 --- a/x-pack/plugin/security/qa/service-account/src/javaRestTest/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountIT.java +++ b/x-pack/plugin/security/qa/service-account/src/javaRestTest/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountIT.java @@ -296,7 +296,8 @@ public class ServiceAccountIT extends ESRestTestCase { "monitor", "create_index", "auto_configure", - "maintenance" + "maintenance", + "view_index_metadata" ], "allow_restricted_indices": false }, @@ -311,7 +312,8 @@ public class ServiceAccountIT extends ESRestTestCase { "monitor", "create_index", "auto_configure", - "maintenance" + "maintenance", + "view_index_metadata" ], "allow_restricted_indices": false } diff --git a/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccounts.java b/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccounts.java index baa920eee275b..67211ec6135be 100644 --- a/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccounts.java +++ b/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccounts.java @@ -160,12 +160,12 @@ final class ElasticServiceAccounts { // Custom permissions required for running Elastic connectors integration RoleDescriptor.IndicesPrivileges.builder() .indices(".elastic-connectors*") - .privileges("read", "write", "monitor", "create_index", "auto_configure", "maintenance") + .privileges("read", "write", "monitor", "create_index", "auto_configure", "maintenance", "view_index_metadata") .build(), // Permissions for data indices and access control filters used by Elastic connectors integration RoleDescriptor.IndicesPrivileges.builder() .indices("content-*", ".search-acl-filter-*") - .privileges("read", "write", "monitor", "create_index", "auto_configure", "maintenance") + .privileges("read", "write", "monitor", "create_index", "auto_configure", "maintenance", "view_index_metadata") .build(), }, new RoleDescriptor.ApplicationResourcePrivileges[] { RoleDescriptor.ApplicationResourcePrivileges.builder()