# What can the manage token privilege to? can it update some cluster settings, like security, or some other stuff? **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [July 11, 2024, 1:14am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920 "2024-07-11T01:14:49Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![ChatLee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chatlee/32/125019_2.png) [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Post date:** [July 11, 2024, 1:14am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/1 "2024-07-11T01:14:49Z")
in the ES guidelines, there does not have too much talks about what the "manage tokne" privilege can be used do. I want to know whether the manage token privilege can be used to update cluster settings, such as security, or some other stuff. ---
**Author:** ![Michael\_Olorunnisola](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_olorunnisola/32/88980_2.png) [@Michael\_Olorunnisola](https://discuss.elastic.co/u/Michael_Olorunnisola)\ **Post date:** [July 11, 2024, 12:51pm UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/2 "2024-07-11T12:51:29Z")
Hi @ChatLee - Thanks for reaching out. Based on your question, I'd suggest reaching out to the folks in #elastic-stack-security . I'll re-tag your initial question so it shows up on their radar! ---
**Author:** ![Michael\_Olorunnisola](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_olorunnisola/32/88980_2.png) [@Michael\_Olorunnisola](https://discuss.elastic.co/u/Michael_Olorunnisola)\ **Post date:** [July 11, 2024, 12:52pm UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/3 "2024-07-11T12:52:34Z")
From #Elastic Security to #Elasticsearch ---
**Author:** ![Michael\_Olorunnisola](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_olorunnisola/32/88980_2.png) [@Michael\_Olorunnisola](https://discuss.elastic.co/u/Michael_Olorunnisola)\ **Post date:** [July 11, 2024, 12:52pm UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/4 "2024-07-11T12:52:35Z")
Added #elastic-stack-security ---
**Author:** ![ChatLee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chatlee/32/125019_2.png) [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Post date:** [July 12, 2024, 12:29am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/5 "2024-07-12T00:29:25Z")
sure, thanks for your hlep ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [July 12, 2024, 6:10am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/6 "2024-07-12T06:10:06Z")
The documentation says: > - `manage_token` All security-related operations on tokens that are generated by the Elasticsearch Token Service. That means it gives access to the APIs listed in the **Tokens** section here - [Security APIs | Elasticsearch Guide [8.14] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api.html#security-token-apis) If you can give us a bit more info about the purpose of your question we can probably provide more useful help. Are you trying to decide on the privileges you need for a role you're creating, or trying to understand what an existing role is permitted to do, or something else? ---
**Author:** ![ChatLee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chatlee/32/125019_2.png) [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Post date:** [July 18, 2024, 12:01am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/7 "2024-07-18T00:01:50Z")
Hi, thanks for your info firstly, what i want to know is if it's safe to create an account with manage\_token privilege for the customer users, the clusters are maintained by the central team. So that's the reason why i submitted this question: if the customer user has an account with manage\_token privilege, can the user has the ability to modify configurations that are not related to token generation? ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [July 18, 2024, 1:44am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/9 "2024-07-18T01:44:57Z")
> [@ChatLee](#): > > can the user has the ability to modify configurations that are not related to token generation? No. `manage_token` only grants access to token APIs and those APIs cannot be used to change cluster configuration. ---
**Author:** ![ChatLee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chatlee/32/125019_2.png) [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Post date:** [August 2, 2024, 3:19am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/10 "2024-08-02T03:19:10Z")
Got it, thanks a lot for your explanation ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 30, 2024, 3:19am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920/11 "2024-08-30T03:19:32Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.