Question

You want to create a role that allows users to read only documents where status is active and see only the name and email fields. Which role definition snippet correctly implements this?

Accepted Answer

{
  "indices": [
    {
      "names": ["users"],
      "privileges": ["read"],
      "query": { "term": { "status": "active" } },
      "field_security": { "grant": ["name", "email"] }
    }
  ]
}

Answer

{
  "indices": [
    {
      "names": ["users"],
      "privileges": ["read"],
      "query": { "match": { "status": "active" } },
      "field_security": { "deny": ["password"] }
    }
  ]
}

Answer

{
  "indices": [
    {
      "names": ["users"],
      "privileges": ["read"],
      "query": { "term": { "status": "active" } },
      "fields": ["name", "email"]
    }
  ]
}

Answer

{
  "indices": [
    {
      "names": ["users"],
      "privileges": ["read"],
      "query": { "term": { "status": "active" } }
    }
  ]
}

You want to create a role that allows users to read only documents where status is active and see only the name and email fields. Which role definition snippet correctly implements this?

Step 1: Verify document-level security query

Step 2: Verify field-level security syntax

Step 3: Eliminate incorrect options

Final Answer:

Quick Check:

Want More Practice?