From 3c59579f99ae23398d3d1bf5f12a03e127de7469 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Tue, 7 Sep 2021 13:03:30 -0400
Subject: [PATCH] Add maintenance privilege for analysts to refresh indices

---
 salt/elasticsearch/roles/analyst.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/elasticsearch/roles/analyst.json b/salt/elasticsearch/roles/analyst.json
index 3fbaa9489..fc788e2f1 100644
--- a/salt/elasticsearch/roles/analyst.json
+++ b/salt/elasticsearch/roles/analyst.json
@@ -22,9 +22,10 @@
       ],
       "privileges": [
         "index",
+        "maintenance",
+        "monitor",
         "read",
         "read_cross_cluster",
-        "monitor",
         "view_index_metadata"
       ]
     }