User and groups management.


It is not clear from documentation. By default ES has two predefined groups admin and ops. Is it possible to create new and assigne custom permissions? For example I want to have separate user for scavenging which can do only scavenging and nothing else. I want to have read only user. I want to have permissions to stream and projection separately. Is it possible?

Thank you.

Most of this is possible have you seen ACLs?

Yes, I read about ACLs. But ACLs work on stream level. So the user that needs to run only scanveger must be in ops group and I need to update every stream ACL to deny access for this user to streams. Right?