Thanks for the answer,
you can see accesses and owner with the stat command and the usefull parameters on elasticsearch.service
stat /usr/share/elasticsearch/
File : '/usr/share/elasticsearch/'
Size : 4096 - Blocks : 8 - IO Block : 4096 - directory
Device : 801h/2049d Inode : 2498173 Links : 7
Access : (0777/drwxrwxrwx) UID : ( 0/ root) GID : ( 0/ root)
stat /etc/elasticsearch/
File : '/etc/elasticsearch/'
Size : 4096 - Blocks : 8 - IO Block : 4096 - directory
Device : 801h/2049d Inode : 524301 Links : 2
Access : (2777/drwxrwsrwx) UID : ( 0/ root) GID : ( 130/elasticsearch)
stat /usr/lib/systemd/system/elasticsearch.service
File : '/usr/lib/systemd/system/elasticsearch.service'
Size : 1679 - Blocks : 8 - IO Block : 4096 - regular file
Device : 801h/2049d Inode : 2361390 Links : 1
Access : (0644/-rw-r--r--) UID : ( 0/ root) GID : ( 0/ root)
cat /usr/lib/systemd/system/elasticsearch.service
[...]User=elasticsearch
Group=elasticsearch
ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet[...]