# DBaaS Opensearch Acl Config

## Properties

| Property | Type | Required | Description |
| --- | --- | --- | --- |
| `acl-enabled` | boolean | no | Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. |
| `acls` | array of [Acls](/reference/api/_schemas/dbaas-opensearch-acl-config/#acls) | no | List of OpenSearch ACLs |
| `extended-acl-enabled` | boolean | no | Enable to enforce index rules in a limited fashion for requests that use the _mget, _msearch, and _bulk APIs |

### Acls {#acls}

| Property | Type | Required | Description |
| --- | --- | --- | --- |
| `rules` | array of [Rules](/reference/api/_schemas/dbaas-opensearch-acl-config/#rules) | no |  |
| `username` | string | no | Min length: `1`. Max length: `64`. |

### Rules {#rules}

| Property | Type | Required | Description |
| --- | --- | --- | --- |
| `index` | string | **yes** | OpenSearch index pattern<br/><br/>Max length: `249`. |
| `permission` | string | no | OpenSearch permission<br/><br/>Allowed values: `admin`, `read`, `deny`, `readwrite`, `write`. |