# Which security rules for access snaphot api?
**URL:** https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146
**Category:** Elasticsearch
**Created:** [October 25, 2017, 4:21am UTC](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146 "2017-10-25T04:21:06Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@RomainXie](https://discuss.elastic.co/u/RomainXie)
#### Post date: [October 25, 2017, 4:21am UTC](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146/1 "2017-10-25T04:21:06Z")
Hi,
I don't find a build-in rule which approve a user to call "PUT \_snapshot/my-repository/snap-test-2017-10-21".
And I had read the reference about snapshot and security, don't have any idea for it.
Anyone can give me some tips?
Or is there a documents talk about the security rules indexed by API endpoint?
Thanks
---
### Author:  [@RomainXie](https://discuss.elastic.co/u/RomainXie)
#### Post date: [October 25, 2017, 4:40am UTC](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146/2 "2017-10-25T04:40:01Z")
Sorry, I got the description about it in the manual, just after I post this 😊
[https://www.elastic.co/guide/en/x-pack/current/security-privileges.html#privileges-list-cluster](https://www.elastic.co/guide/en/x-pack/current/security-privileges.html#privileges-list-cluster)
We use the "manage" rule which includes snapshotting, updating settings, and rerouting.
Is there a way only approve snapshotting?
Thanks
---
### Author:  [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [October 25, 2017, 5:10am UTC](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146/3 "2017-10-25T05:10:53Z")
I'm afraid there isn't a cluster privilege specifically for snapshot.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 22, 2017, 5:10am UTC](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146/4 "2017-11-22T05:10:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.