Elasticsearch API key role_descriptors bounded by creator privileges
Scoping API keys below creator privileges We need to issue Elasticsearch API keys for an external integration that must not reuse the built-in elastic user or inherit full cluster access. The documented behavior is that a key created via POST /_security/api_key inherits all privileges of the creating user unless role_descriptors are supplied. Those descripto
elasticsearch