
Elasticsearch Authz
This handles Elasticsearch RBAC operations: creating native users, defining roles with granular index and cluster privileges, and mapping external realm users from LDAP or SAML. The skill walks you through decomposing natural language access requests into discrete API calls, checking for existing roles before creating duplicates, and choosing between the Elasticsearch and Kibana APIs depending on whether you need Kibana feature privileges. It covers document and field level security for restricting data visibility, and includes specific workflows for self-managed, ECH, and Serverless deployments. Useful when you're setting up least-privilege access and want structured guidance on translating "give this person read access to these logs" into the right sequence of user, role, and role mapping operations.
- skills.sh installs
- 2.9K
- GitHub stars
- 604
- last updated
- Aug 21, 2026
Install
$ npx -y skills add elastic/agent-skills --skill elasticsearch-authz --agent claude-codeInstalls into .claude/skills of the current project.
Files
This handles Elasticsearch RBAC operations: creating native users, defining roles with granular index and cluster privileges, and mapping external realm users from LDAP or SAML. The skill walks you through decomposing natural language access requests into discrete API calls, checking for existing roles before creating duplicates, and choosing between the Elasticsearch and Kibana APIs depending on whether you need Kibana feature privileges. It covers document and field level security for restricting data visibility, and includes specific workflows for self-managed, ECH, and Serverless deployments. Useful when you're setting up least-privilege access and want structured guidance on translating "give this person read access to these logs" into the right sequence of user, role, and role mapping operations.
Browse the repository on GitHubSponsors
Details
- Repository
- github.com/elastic/agent-skills
- Categories
- Security, AI & Agent Building, Databases
- First seen
- May 16, 2026
More from elastic/agent-skills
All 57- Elasticsearch Audit2.9K
- Kibana Streams2.9K
- Kibana Connectors2.9K
- Kibana Vega2.9K
- Elasticsearch Security Troubleshooting2.9K
- Observability Service Health2.9K
- Kibana Audit2.8K
- Observability Manage Slos2.8K
- Cloud Network Security2.8K
- Cloud Manage Project2.8K
- Cloud Setup2.7K
- Observability Edot Python Instrument2.7K
- Cloud Create Project2.7K
- Observability Edot Java Instrument2.7K
- Observability Edot Dotnet Instrument2.7K
- Observability Edot Dotnet Migrate2.7K
- Cloud Access Management2.7K
- Observability Edot Python Migrate2.7K
- Observability Edot Java Migrate2.7K
- Cloud Access Management
- Kibana Agent Builder
- Security Alert Triage
- Security Case Management
- Cloud Create Project