User and groups management.

EventStoreDB
1

Hello.

It is not clear from documentation. By default ES has two predefined groups admin and ops. Is it possible to create new and assigne custom permissions? For example I want to have separate user for scavenging which can do only scavenging and nothing else. I want to have read only user. I want to have permissions to stream and projection separately. Is it possible?

Thank you.

2

Most of this is possible have you seen ACLs? https://eventstore.org/docs/server/3.0.2/access-control-lists/

3

Yes, I read about ACLs. But ACLs work on stream level. So the user that needs to run only scanveger must be in ops group and I need to update every stream ACL to deny access for this user to streams. Right?