You need to create a role and map it to the user.
Here is the first steps tutorial Configuring roles | Security for Elasticsearch | Search Guard
And here you can find a list of available action groups (sets of permissions) Permissions and action groups in Search Guard | Security for Elasticsearch | Search Guard