# Read/Monitor/CRUD on all the indices and cluster wide sg_our_admin: cluster: - CLUSTER_MONITOR - CLUSTER_COMPOSITE_OPS_RO indices: '*': - CRUD #Read client1 indices only sg_client1_read: cluster: - CLUSTER_MONITOR - CLUSTER_COMPOSITE_OPS_RO - INDICES_MONITOR indices: '?monitor*': '*': - INDICES_ALL client1: '*': - INDICES_MONITOR - INDICES_ALL - RO #Read client2 indices only sg_client2_read: cluster: - CLUSTER_MONITOR - CLUSTER_COMPOSITE_OPS_RO - INDICES_MONITOR indices: '?monitor*': '*': - INDICES_ALL client2: '*': - INDICES_MONITOR - INDICES_ALL - RO #Write client1 indices only sg_client1_write: cluster: - CLUSTER_MONITOR - CLUSTER_COMPOSITE_OPS_RO - INDICES_MONITOR indices: '?monitor*': '*': - INDICES_ALL client1: '*': - INDICES_MONITOR - INDICES_ALL - WRITE #Write client2 indices only sg_client2_write: cluster: - CLUSTER_MONITOR - CLUSTER_COMPOSITE_OPS_RO - INDICES_MONITOR indices: '?monitor*': '*': - INDICES_ALL client2: '*': - INDICES_MONITOR - INDICES_ALL - WRITE