From 9dda8247e7ed02aba9cb6101915942c304b846cf Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Mon, 5 Feb 2024 15:44:41 +0000
Subject: [PATCH] Admin role for Query insights plugin (#4006)

Signed-off-by: Chenyang Ji <cyji@amazon.com>
(cherry picked from commit 6b9ded21b2b7af18f8bacbcf1b242ffe12960da1)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 config/roles.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/config/roles.yml b/config/roles.yml
index ce9be65883..a8d7ad6793 100644
--- a/config/roles.yml
+++ b/config/roles.yml
@@ -398,3 +398,9 @@ flow_framework_read_access:
     - 'cluster:admin/opensearch/flow_framework/workflow_state/get'
     - 'cluster:admin/opensearch/flow_framework/workflow_state/search'
     - 'cluster:admin/opensearch/flow_framework/workflow_step/get'
+
+# Allows users to use all query insights APIs
+query_insights_full_access:
+  reserved: true
+  cluster_permissions:
+    - 'cluster:admin/opensearch/insights/top_queries/*'