Privileges for using ArcGIS with Elasticsearch

Privileges determine what a user is authorized to do with the data and the database. You can view and query data from Elasticsearch in ArcGIS Pro. If the data is published as an editable web feature layer, users can edit the data. Because the data is accessed through the web feature layer, the user specified in the connection file that you register with the ArcGIS Server site must have privileges to edit the data.

Using Elasticsearch tools, the Elasticsearch administrator must create logins and grant them the privileges they require to complete their work.

The following table lists common types of users and the minimum privileges they require to query and edit data in Elasticsearch from ArcGIS.

Type of user	Required privileges	Purpose
Data viewer	cluster:monitor/main on the cluster	To connect to an Elasticsearch cluster, the login used for authentication purposes must exist in the cluster and this privilege must be granted to the login.
	read view_index_metadata indices:monitor/stats indices:admin/aliases/get indices:admin/mappings/get	These index privileges must be granted to each login, per index that the login needs to access.
Data editor Data editors require the same privileges as data viewers, as well as these additional privileges.	write	This privilege is required per index to be edited through the feature layer.
	cluster:monitor/state	The feature service that populates the web feature layer requires access to this index.

Note:

To edit data, publish editable web feature layers that reference the data in Elasticsearch.