@@ -10,7 +10,7 @@ To use the {stack} {ml-features}, you must have the
10
10
<<ml-nodes,{ml} node>> in your cluster.
11
11
12
12
In {kib}, the {ml-features} must be visible in your
13
- {kibana-ref}/xpack-spaces.html#spaces-control-feature-visibility[space] and your
13
+ {kibana-ref}/xpack-spaces.html#spaces-control-feature-visibility[space] and your
14
14
source index patterns must exist in the same space as your {ml} jobs.
15
15
16
16
If {stack} {security-features} are enabled, you must also ensure your users have
@@ -52,7 +52,7 @@ For full access to the {ml-features} in {kib}, you must have:
52
52
* [ ] `read` and `view_index_metadata` index privileges on source indices
53
53
* [ ] `read`, `manage`, and `index` index privileges on destination indices (for
54
54
{dfanalytics-jobs} only)
55
-
55
+
56
56
For read-only access to the {ml-features} in {kib}, you must have:
57
57
58
58
[%interactive]
@@ -67,8 +67,8 @@ To upload files in {kib} with the *{file-data-viz}*, you must have:
67
67
* [ ] `all` {kib} privileges for the {ml-features} in the appropriate spaces.
68
68
Alternatively, `read` {kib} privileges for the {ml-features} and `all` {kib}
69
69
privileges for the index pattern management feature
70
- * [ ] `ingest_admin` {ref}/built-in-roles.html[built-in role]
71
- * [ ] `read`, `manage`, and `index ` index privileges for destination indices
70
+ * [ ] `manage_pipeline` cluster privilege
71
+ * [ ] `create` and `create_index ` index privileges for destination indices
72
72
73
73
IMPORTANT: You cannot limit access to specific {ml} objects in each space. If
74
74
the {ml} feature is visible in your space and you have `read` or `all` {kib}
@@ -78,6 +78,6 @@ If you do not use {kib} and instead call {ml} APIs directly, you must have the
78
78
index privileges listed above as well as `machine_learning_admin` or `machine_learning_user` built-in roles.
79
79
80
80
WARNING: The `machine_learning_admin` and `machine_learning_user` roles grant
81
- access to the {ml-features} in all {kib} spaces. Therefore, when you use {kib},
81
+ access to the {ml-features} in all {kib} spaces. Therefore, when you use {kib},
82
82
use custom roles instead and set your {kib} privileges appropriately for each
83
- space.
83
+ space.
0 commit comments