2nd attempt at https://github.com/elastic/elasticsearch/issues/84591

references https://github.com/elastic/elasticsearch/issues/48856#issuecomment-831144741

tldr; the permission structure for the endpoint isn't useful for most users. If users can create runtime fields they should have access to this api, they shouldn't need a specific permission set. 
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/action/SecurityActionMapperTests.java
}
        clearScrollRequest.addScrollId("_all");
        
        Collections.shuffle(clearScrollRequest.getScrollIds(), random());
        assertThat(
            SecurityActionMapper.action(ClearScrollAction.NAME, clearScrollRequest),
            equalTo(SecurityActionMapper.CLUSTER_PERMISSION_SCROLL_CLEAR_ALL_NAME)
        );
    }
    public void testIndicesAnalyze() {
        SecurityActionMapper securityActionMapper = new SecurityActionMapper();
        AnalyzeAction.Request analyzeRequest;
        if (randomBoolean()) {
            analyzeRequest = new AnalyzeAction.Request(randomAlphaOfLength(randomIntBetween(1, 30))).text("text");
        } else {
            analyzeRequest = new AnalyzeAction.Request(null).text("text");
            analyzeRequest.index(randomAlphaOfLength(randomIntBetween(1, 30)));
        }
        assertThat(SecurityActionMapper.action(AnalyzeAction.NAME, analyzeRequest), equalTo(AnalyzeAction.NAME));
    }
    public void testClusterAnalyze() {
        SecurityActionMapper securityActionMapper = new SecurityActionMapper();
        AnalyzeAction.Request analyzeRequest = new AnalyzeAction.Request(null).text("text");
        assertThat(
            SecurityActionMapper.action(AnalyzeAction.NAME, analyzeRequest),
            equalTo(SecurityActionMapper.CLUSTER_PERMISSION_ANALYZE)
        );
    }
}