Users, Roles, API Keys, and Authentication - Elasticsearch
Elasticsearch users, roles, role mappings, privileges, API keys, service tokens, profiles, certificates, SAML, OIDC, and authentication operations. Generated from the official Apache-2.0 Elasticsearch 9.4 commit-pinned OpenAPI contract. Enroll the connection at the origin of the target Elasticsearch deployment and store the complete Authorization value (ApiKey, Bearer, or Basic). The pack owns every API path. Reads are uncached; security-sensitive and preview reads are marked sensitive-read; every mutation is grant-off and approval-gated. No arbitrary Elasticsearch document is represented as a task, note, or project Source.
What this pack installs
- elasticsearch-security Ingredient
Trust & control
What installing this whole pack would let it do. Recued grants these permissions at install — review them there before approving.
What it's allowed to do
Destructive
Web APIs
elasticsearch-security
external change
Admin: security.security_activate_user_profile · Always asksRead: security.security_authenticate · Asks approvalRead: security.security_get_role_1 · Asks approvalAdmin: security.security_bulk_put_role · Always asksDestructive: security.security_bulk_delete_role · Always asksAdmin: security.security_bulk_update_api_keys · Always asksAdmin: security.security_change_password · Always asksAdmin: security.security_change_password_1 · Always asksAdmin: security.security_change_password_2 · Always asksAdmin: security.security_change_password_3 · Always asksDestructive: security.security_clear_api_key_cache · Always asksDestructive: security.security_clear_cached_privileges · Always asksDestructive: security.security_clear_cached_realms · Always asksDestructive: security.security_clear_cached_roles · Always asksDestructive: security.security_clear_cached_service_tokens · Always asksAdmin: security.security_clone_api_key_1 · Always asksAdmin: security.security_clone_api_key · Always asksRead: security.security_get_api_key · Asks approvalAdmin: security.security_create_api_key · Always asksAdmin: security.security_create_api_key_1 · Always asksDestructive: security.security_invalidate_api_key · Always asksAdmin: security.security_create_cross_cluster_api_key · Always asksAdmin: security.security_create_service_token · Always asksAdmin: security.security_create_service_token_1 · Always asksDestructive: security.security_delete_service_token · Always asksAdmin: security.security_create_service_token_2 · Always asksAdmin: security.security_delegate_pki · Always asksRead: security.security_get_privileges_2 · Asks approvalDestructive: security.security_delete_privileges · Always asksRead: security.security_get_role · Asks approvalAdmin: security.security_put_role · Always asksAdmin: security.security_put_role_1 · Always asksDestructive: security.security_delete_role · Always asksRead: security.security_get_role_mapping · Asks approvalAdmin: security.security_put_role_mapping · Always asksAdmin: security.security_put_role_mapping_1 · Always asksDestructive: security.security_delete_role_mapping · Always asksRead: security.security_get_user · Asks approvalAdmin: security.security_put_user · Always asksAdmin: security.security_put_user_1 · Always asksDestructive: security.security_delete_user · Always asksDestructive: security.security_disable_user · Always asksDestructive: security.security_disable_user_1 · Always asksDestructive: security.security_disable_user_profile · Always asksDestructive: security.security_disable_user_profile_1 · Always asksAdmin: security.security_enable_user · Always asksAdmin: security.security_enable_user_1 · Always asksAdmin: security.security_enable_user_profile · Always asksAdmin: security.security_enable_user_profile_1 · Always asksAdmin: security.security_enroll_kibana · Always asksAdmin: security.security_enroll_node · Always asksRead: security.security_get_builtin_privileges · Asks approvalRead: security.security_get_privileges · Asks approvalAdmin: security.security_put_privileges · Always asksAdmin: security.security_put_privileges_1 · Always asksRead: security.security_get_privileges_1 · Asks approvalRead: security.security_get_role_mapping_1 · Asks approvalRead: security.security_get_service_accounts · Asks approvalRead: security.security_get_service_accounts_1 · Asks approvalRead: security.security_get_service_accounts_2 · Asks approvalRead: security.security_get_service_credentials · Asks approvalRead: security.security_get_settings · Asks approvalAdmin: security.security_update_settings · Always asksRead: security.security_get_stats · Asks approvalAdmin: security.security_get_token · Always asksDestructive: security.security_invalidate_token · Always asksRead: security.security_get_user_1 · Asks approvalRead: security.security_get_user_privileges · Asks approvalRead: security.security_get_user_profile · Asks approvalAdmin: security.security_grant_api_key · Always asksRead: security.security_has_privileges_1 · Asks approvalRead: security.security_has_privileges_3 · Asks approvalRead: security.security_has_privileges_user_profile_1 · Asks approvalAdmin: security.security_oidc_authenticate · Always asksAdmin: security.security_oidc_logout · Always asksAdmin: security.security_oidc_prepare_authentication · Always asksRead: security.security_query_api_keys_1 · Asks approvalRead: security.security_query_role_1 · Asks approvalRead: security.security_query_user_1 · Asks approvalAdmin: security.security_saml_authenticate · Always asksAdmin: security.security_saml_complete_logout · Always asksDestructive: security.security_saml_invalidate · Always asksAdmin: security.security_saml_logout · Always asksAdmin: security.security_saml_prepare_authentication · Always asksRead: security.security_saml_service_provider_metadata · Asks approvalRead: security.security_suggest_user_profiles_1 · Asks approvalAdmin: security.security_update_api_key · Always asksAdmin: security.security_update_cross_cluster_api_key · Always asksAdmin: security.security_update_user_profile_data · Always asksAdmin: security.security_update_user_profile_data_1 · Always asksRead: security.ssl_certificates · Asks approval