It is not clear from documentation. By default ES has two predefined groups admin and ops. Is it possible to create new and assigne custom permissions? For example I want to have separate user for scavenging which can do only scavenging and nothing else. I want to have read only user. I want to have permissions to stream and projection separately. Is it possible?