Manage users
Who can do this?
- Subscription Admins
- Technical Admins
Once an Elastic deployment is successfully provisioned, Subscription Admins can grant access by assigning roles to users in Console.
How it works
The users and roles assigned are specific to a deployment. In your subscription account > User Management, you can add users and assign them to one of the following StackOps default roles:
- Admin
- User
- Dashboard viewer
By default, Subscription Admins and Technical Admins are Admins for their StackOps deployments. If a Subscription Admin is removed from the Admin role, they can still manage users.
Related links:
- Refer to StackOps default role privileges for the detailed permissions.
- Refer to Console documentation for the detailed steps.
Further customisation
To provide users with additional privileges, you can also assign the following types of roles to users in Console via Role Mapping:
- Elastic default roles — Built-in Elasticsearch and Elastic Enterprise Search roles provided by Elastic.
- StackOps-managed roles — StackOps-created roles with the
somr_prefix for specific use cases, such as stack monitoring. - Custom roles — User-defined roles with the
socr_prefix for tailored permissions. - Remote cluster roles — Roles with the
rcr_prefix that enable cross-cluster search and replication between deployments.
Related links:
- StackOps-managed roles
- Custom roles
- Role mapping
- StackOps API documentation for managing role mapping and custom roles.
