elastic avatar

Elasticsearch Authz

This handles Elasticsearch RBAC operations: creating native users, defining roles with granular index and cluster privileges, and mapping external realm users from LDAP or SAML. The skill walks you through decomposing natural language access requests into discrete API calls, checking for existing roles before creating duplicates, and choosing between the Elasticsearch and Kibana APIs depending on whether you need Kibana feature privileges. It covers document and field level security for restricting data visibility, and includes specific workflows for self-managed, ECH, and Serverless deployments. Useful when you're setting up least-privilege access and want structured guidance on translating "give this person read access to these logs" into the right sequence of user, role, and role mapping operations.

skills.sh installs
2.9K
GitHub stars
604
last updated
Aug 21, 2026

Install

$ npx -y skills add elastic/agent-skills --skill elasticsearch-authz --agent claude-code

Installs into .claude/skills of the current project.

Files

This handles Elasticsearch RBAC operations: creating native users, defining roles with granular index and cluster privileges, and mapping external realm users from LDAP or SAML. The skill walks you through decomposing natural language access requests into discrete API calls, checking for existing roles before creating duplicates, and choosing between the Elasticsearch and Kibana APIs depending on whether you need Kibana feature privileges. It covers document and field level security for restricting data visibility, and includes specific workflows for self-managed, ECH, and Serverless deployments. Useful when you're setting up least-privilege access and want structured guidance on translating "give this person read access to these logs" into the right sequence of user, role, and role mapping operations.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/elastic/agent-skills
Categories
Security, AI & Agent Building, Databases
First seen
May 16, 2026

More from elastic/agent-skills

All 57

Recommended

More Security
1getsentry avatardjango-access-reviewgetsentry/skillsDjango access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorizatio2.8Kskills.sh installs
2davila7 avatarsenior-backenddavila7/claude-code-templatesComprehensive backend development skill for building scalable backend systems using NodeJS, Express, Go, Python, Postgres, GraphQL, REST APIs. Includes API scaf2.7Kskills.sh installs
3laravel avatarlaravel-best-practiceslaravel/boostApply this skill whenever writing, reviewing, or refactoring Laravel PHP code. This includes creating or modifying controllers, models, migrations, form request2.4Kskills.sh installs
4mrgoonie avatarbackend-developmentmrgoonie/claudekit-skillsBuild robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis),2.3Kskills.sh installs
5jiatastic avatarpython-backendjiatastic/open-python-skillsPython backend development expertise for FastAPI, security patterns, database operations, Upstash integrations, and code quality. Use when: (1) Building REST AP2.2Kskills.sh installs
6daymade avatarqa-expertdaymade/claude-code-skillsThis skill should be used when establishing comprehensive QA testing processes for any software project. Use when creating test strategies, writing test cases f2Kskills.sh installs