Fine-grained authorization for Elasticsearch RAG with SpiceDB

Our short summary of Elastic’s engineering write-up. The full story, with all the detail, is on their blog.

Problem

Teams needed secure, fine‑grained access control for each document chunk in their Elasticsearch RAG chatbot.

Solution

They integrated SpiceDB to check each retrieved chunk against a relationship graph before passing it to the LLM, keeping authorization separate from the vector search.

Tags: Graph RAG
RAG
Vector search

+ Suggest a write-up

Want the architecture, code and numbers? They’re in the original post.

Read the full write-up on elastic.co

Problem

Solution

More from RAG and search