elasticsearch/x-pack/docs/en/security/operator-privileges/operator-only-functionality.asciidoc

[role="xpack"]
[testenv="enterprise"]
[[operator-only-functionality]]
=== Operator-only functionality

NOTE: {cloud-only}

Operator privileges provide protection for APIs and dynamic cluster settings.
Any API or cluster setting that is protected by operator privileges is known as 
_operator-only functionality_. When the operator privileges feature is enabled, 
operator-only APIs can be executed only by operator users. Likewise,
operator-only settings can be updated only by operator users. The list of
operator-only APIs and dynamic cluster settings are pre-determined in the
codebase. The list may evolve in future releases but it is otherwise fixed in a
given {es} version.

[[operator-only-apis]]
==== Operator-only APIs

* <<voting-config-exclusions>>
* <<delete-license>>
* <<update-license>>
* <<autoscaling-put-autoscaling-policy>>
* <<autoscaling-delete-autoscaling-policy>>
* <<repo-analysis-api>>

[[operator-only-dynamic-cluster-settings]]
==== Operator-only dynamic cluster settings

* All <<ip-filtering,IP filtering>> settings
* The following the dynamic <<ml-settings,machine learning settings>>:
  - `xpack.ml.node_concurrent_job_allocations`
  - `xpack.ml.max_machine_memory_percent`
  - `xpack.ml.use_auto_machine_memory_percent`
  - `xpack.ml.max_lazy_ml_nodes`
  - `xpack.ml.process_connect_timeout`
  - `xpack.ml.nightly_maintenance_requests_per_second`
  - `xpack.ml.max_ml_node_size`
  - `xpack.ml.enable_config_migration`
  - `xpack.ml.persist_results_max_retries`