# Updating X-Pack's RAP Data in an Elastic Cluster

**URL:** <https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391>\
**Category:** Elasticsearch\
**Created:** [February 19, 2018, 3:45am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391 "2018-02-19T03:45:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ong/32/40766_2.png) [@Ong](https://discuss.elastic.co/u/Ong)\
**Post date:** [February 19, 2018, 3:45am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391/1 "2018-02-19T03:45:27Z")

</div>

I have a 3 node Elasticsearch cluster with X-Pack installed on each of the nodes.

If I were to update the Role Access Profile data of X-Pack security, do I need to update each of the X-Pack instances on each Elasticsearch node or can I just update one of the X-Pack instances and the change will be propagated to the other instances in the cluster?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [February 19, 2018, 5:00am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391/2 "2018-02-19T05:00:18Z")

</div>

> [@Ong](#):
>
> If I were to update the Role Access Profile data of X-Pack security, do I need to update each of the X-Pack instances on each Elasticsearch node or can I just update one of the X-Pack instances and the change will be propagated to the other instances in the cluster?

This depends on how you are defining your roles.

The [Role Management API](https://www.elastic.co/guide/en/x-pack/6.2/defining-roles.html#roles-management-api) stores all roles in Elasticsearch indices, so they are a cluster resource which are automatically synchronized across all nodes.

[File-base role management](https://www.elastic.co/guide/en/x-pack/6.2/defining-roles.html#roles-management-file) relies on files stored on each node. You are responsible for ensuring the each node has an identical copy of that file, the cluster will not propagate it automatically.

---

<div class="post-metadata">

**Author:** ![Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ong/32/40766_2.png) [@Ong](https://discuss.elastic.co/u/Ong)\
**Post date:** [February 19, 2018, 5:22am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391/3 "2018-02-19T05:22:16Z")

</div>

Thanks for the explanation Tim.

I am using the Role Management API for defining the roles. So the application will need to update just 1 X-pack instance in the cluster. Is that right?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [February 19, 2018, 6:23am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391/4 "2018-02-19T06:23:25Z")

</div>

> [@Ong](#):
>
> So the application will need to update just 1 X-pack instance in the cluster. Is that right?

That's not an accurate way to describe it, but the conclusion is correct.

You connect to 1 node in the cluster, and send a request to update the role, and it will be updated across the whole cluster. But the node you connect to might not actually be storing that data, so it's misleading to say that you're updating "1 X-pack instance", you're updating the whole cluster.

---

<div class="post-metadata">

**Author:** ![Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ong/32/40766_2.png) [@Ong](https://discuss.elastic.co/u/Ong)\
**Post date:** [February 19, 2018, 9:15am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391/5 "2018-02-19T09:15:17Z")

</div>

Understood, thanks for the clarification!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 19, 2018, 9:15am UTC](https://discuss.elastic.co/t/updating-x-packs-rap-data-in-an-elastic-cluster/120391/6 "2018-03-19T09:15:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
