Elastic Certified Engineer

Which Elasticsearch security feature allows you to assign a named set of privileges to a user?