Elasticsearch Data Source Spectrum Reports¶
The reports for All User and Admin Count, User Privilege Report, and User Granted Role and Table Count can be generated for the Elasticsearch data sources.
The following permissions are required for the following Elasticsearch objects:
- select on system:user_info
- select on system:roles
- select on system:keyspaces
- REST API acces /_security/user/_privileges
All User and Admin Count¶
The report provides a summary of the number of admin and non-admin user accounts in a Elastic database, along with details about the data source and a timestamp indicating when the data was recorded. It is useful for assessing the distribution of administrative and non-administrative users within the database.
User Privilege Report¶
The report contains information about user accounts in an Elastic database, including their system IDs, table counts, group roles, and timestamps related to SQL risk assessments. It is useful for managing and auditing database user activity and roles.
User Granted Role and Table Count¶
The report provides information about different Elastic database users, including the number of roles granted to each user and the count of tables they have access to. It helps in understanding user privileges and the extent of their access within the database.
