---
# DLS (Document level security) is NOT FREE FOR COMMERCIAL use, you need to obtain an enterprise license
# https://docs.search-guard.com/latest/document-level-security

# FLS (Field level security) is NOT FREE FOR COMMERCIAL use, you need to obtain an enterprise license
# https://docs.search-guard.com/latest/field-level-security

# Masked fields (field anonymization) is NOT FREE FOR COMMERCIAL use, you need to obtain an compliance license
# https://docs.search-guard.com/latest/field-anonymization

# Kibana multitenancy is NOT FREE FOR COMMERCIAL use, you need to obtain an enterprise license
# https://docs.search-guard.com/latest/kibana-multi-tenancy

# Define your own search guard roles here
# or use the built-in search guard roles
# See https://docs.search-guard.com/latest/roles-permissions

EXAMPLE_ROLE:
  description: "Sample role definition for demonstration purposes"
  cluster_permissions:
    - cluster:monitor/main"
    - SGS_CLUSTER_MONITOR
  index_permissions:
    - index_patterns:
        - "*"
      allowed_actions:
        - SGS_INDICES_MONITOR
      dls: '{"term" : { "test": "myvalue"}}'
      fls:
        - 'myfields*'
        - 'otherfield'
      masked_fields:
        - 'lastname'
        - '*ip_source::/[0-9]{1,3}$/::XXX::/^[0-9]{1,3}/::***'
#  tenant_permissions:
#    - tenant_patterns:
#        - "mytenant"
#      allowed_actions:
#        - "SGS_KIBANA_ALL_READ"