Users and Service Accounts
Access to your StackOps Elastic deployments is governed through role-based access controls (RBAC). These roles can be attached to users or service accounts, providing granular access to your deployments.
Use Console to manage access, including adding users, creating service accounts, or creating custom roles.
Available roles
There are several types of available roles:
| Role type | Description | Used for | Manage access through |
|---|---|---|---|
| StackOps default roles | Deployment-specific roles assigned directly to users: - Admin - User - Dashboard viewer |
Users | Console > User Management |
| Elastic default roles | Built-in Elasticsearch and Elastic Enterprise Search roles provided by Elastic. | Users | Console > Role Mapping |
| StackOps-managed roles | StackOps-created roles with the somr_ prefix for specific use cases, such as stack monitoring. |
Users | Console > Role Mapping |
| Custom roles | User-defined roles with the socr_ prefix for tailored permissions. |
Users | Console > Role Mapping |
| Service account roles | Pre-built roles with the sosar_ prefix for automation use cases, such as log ingestion and APM management. |
Service accounts | Console > Service Accounts |
| Remote cluster roles | Roles with the rcr_ prefix that enable cross-cluster search and replication between deployments. |
- Users - Service accounts |
- Console > Role Mapping - Console > Service Accounts |
