Privileges for using ArcGIS with OpenSearch

Privileges determine what a user is authorized to do with the data and the database. You can view and query data from OpenSearch in ArcGIS Pro. If the data is published as an editable web feature layer, users can edit the data. Because the data is accessed through the web feature layer, the user specified in the connection file that you register with the ArcGIS Server site must have privileges to edit the data.

Using OpenSearch tools, the OpenSearch administrator must create logins and grant them the privileges they require to complete their work.

The following table lists common types of users and the minimum privileges they require to query and edit data in OpenSearch from ArcGIS.

Type of user	Required privileges	Purpose
Data viewer	cluster:monitor/main on the cluster	To connect to an OpenSearch cluster, the login used for authentication purposes must exist in the cluster and this privilege must be granted to the login.
	read indices:monitor/stats indices:monitor/settings/get indices:admin/aliases/get indices:admin/mappings/get	These index privileges must be granted to each login, per index that the login needs to access.
Data editor Data editors require the same privileges as data viewers, as well as these additional privileges.	write	This privilege is required per index to be edited through the feature layer.
	cluster:monitor/state cluster:monitor/health	The feature service that populates the web feature layer requires access to these indices.

Note:

To edit data, publish editable web feature layers that reference the data in OpenSearch.