---
# In this file users, backendroles and hosts can be mapped to Search Guard roles.
# Permissions for Search Guard roles are configured in sg_roles.yml

# Define your roles mapping here
# See https://docs.search-guard.com/latest/mapping-users-roles

## Demo roles mapping

SGS_ALL_ACCESS:
  backend_roles:
  - "admin"
  description: "Maps admin to SGS_ALL_ACCESS"

SGS_OWN_INDEX:
  users:
  - "*"
  description: "Allow full access to an index named like the username"

SGS_LOGSTASH:
  backend_roles:
  - "logstash"

SGS_KIBANA_USER:
  backend_roles:
  - "kibanauser"
  description: "Maps kibanauser to SGS_KIBANA_USER"

SGS_READALL:
  backend_roles:
  - "readall"

SGS_MANAGE_SNAPSHOTS:
  backend_roles:
  - "snapshotrestore"

SGS_KIBANA_SERVER:
  users:
  - "kibanaserver"
