Adding roles to other roles and have role mappings reflected automatically

Security
1

Greetings all,

Is there a way to have nested role in OpenDistro security plugin (or even OpenSearch)?

So if I have a role (all_employees) and another sub role (engineers) where engineers are also part of all_employees. It it possible to add engineers to all_employee role so that its rolemappings will show users added to engineers rolemappings?

Thanks

2

@asfoorial there is no such option to the best of my knowledge, the best alternative would be to include all permissions from all_employees in engineers role, and just map to this role. Hope this helps

3

Thanks @Anthony. Perhaps this is something that can be added to the roadmap of OpenSearch since most data systems have this feature. It would be a challenge to maintain security of the indexed data if security is implemented in a nested-roles approach which is the case most of the time.

4

Absolutely. Could you please open a feature request?