# Update security index settings **PUT /_security/settings** Update the user-configurable settings for the security internal index (`.security` and associated indices). Only a subset of settings are allowed to be modified. This includes `index.auto_expand_replicas` and `index.number_of_replicas`. NOTE: If `index.auto_expand_replicas` is set, `index.number_of_replicas` will be ignored during updates. If a specific index is not in use on the system and settings are provided for it, the request will be rejected. This API does not yet support configuring the settings for indices before they are in use. ## Required authorization * Cluster privileges: `manage_security` ## Servers - http://api.example.com: http://api.example.com () ## Authentication methods - Api key auth - Basic auth - Bearer auth ## Parameters ### Query parameters - **master_timeout** (string) The period to wait for a connection to the master node. If no response is received before the timeout expires, the request fails and returns an error. - **timeout** (string) The period to wait for a response. If no response is received before the timeout expires, the request fails and returns an error. ### Body: application/json (object) - **security** (object) Settings for the index used for most security configuration, including native realm users and roles configured with the API. - **security-profile** (object) Settings for the index used to store profile information. - **security-tokens** (object) Settings for the index used to store tokens. ## Responses ### 200 #### Body: application/json (object) - **acknowledged** (boolean) [Powered by Bump.sh](https://bump.sh)