# Adding document level security doesnt let user login to dashboard

**URL:** <https://forum.opensearch.org/t/adding-document-level-security-doesnt-let-user-login-to-dashboard/10444>\
**Category:** Security\
**Created:** [July 30, 2022, 5:21am UTC](https://forum.opensearch.org/t/adding-document-level-security-doesnt-let-user-login-to-dashboard/10444 "2022-07-30T05:21:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![karthik](https://avatars.discourse-cdn.com/v4/letter/k/9fc348/32.png) [@karthik](https://forum.opensearch.org/u/karthik)\
**Post date:** [July 30, 2022, 5:21am UTC](https://forum.opensearch.org/t/adding-document-level-security-doesnt-let-user-login-to-dashboard/10444/1 "2022-07-30T05:21:50Z")

</div>

Hi everyone, we added document level security to one of the roles and after doing this we are not able to login to opensearch dashboard as users mapped to that role, we are able to query opensearch cluster as these users the issue seems to be just when logging in through opensearch dashbpard, we are getting this error when we try to login,:

{“statusCode”:404,“error”:“Not Found”,“message”:“Saved object [config/1.3.1] not found”}

We removed document level security in role and we are able to login just fine, can someone please help us with this not sure what we are missing.

We have tried adding kibana\_all\_read and kibana\_all\_write to user but still no luck

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [August 2, 2022, 11:39am UTC](https://forum.opensearch.org/t/adding-document-level-security-doesnt-let-user-login-to-dashboard/10444/2 "2022-08-02T11:39:18Z")

</div>

@karthik Could you share your DLS and the role settings?

---

<div class="post-metadata">

**Author:** ![merlinz01](https://avatars.discourse-cdn.com/v4/letter/m/b77776/32.png) [@merlinz01](https://forum.opensearch.org/u/merlinz01)\
**Post date:** [September 23, 2024, 11:04pm UTC](https://forum.opensearch.org/t/adding-document-level-security-doesnt-let-user-login-to-dashboard/10444/3 "2024-09-23T23:04:08Z")

</div>

I’m running into this exact error that goes away when I remove DLS. Using OpenSearch & Dashboards 2.16 Debian install.

Here’s my role config:

```yaml
external_jwt_user:
  reserved: true
  hidden: false
  cluster_permissions:
    - read
    - cluster_composite_ops_ro
  index_permissions:
    - index_patterns:
      - "the-logs"
      - "*" # added for debugging
      allowed_actions:
        - read
        - "*" # added for debugging
      dls: "{\"term\": {\"organization_id\": \"${attr.jwt.organization_id}\"}}"
  tenant_permissions: []
  static: false

```

Did you get this figured out?

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [September 25, 2024, 10:55pm UTC](https://forum.opensearch.org/t/adding-document-level-security-doesnt-let-user-login-to-dashboard/10444/4 "2024-09-25T22:55:43Z")

</div>

@merlinz01 What is your authentication/authorization type?  
Could you share your config.yml?