# Asynchronous\_search permissions

**URL:** <https://forum.opensearch.org/t/asynchronous-search-permissions/28228>\
**Category:** OpenSearch\
**Created:** [July 30, 2026, 1:11pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228 "2026-07-30T13:11:18Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![hitesh303](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@hitesh303](https://forum.opensearch.org/u/hitesh303)\
**Post date:** [July 30, 2026, 1:11pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228/1 "2026-07-30T13:11:18Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser): 3.7.0

**Describe the issue** : cluster:admin/opensearch/asynchronous\_search/\* permissions not available to update the role. I have checked admin/opensearch and admin/opendistro

**Configuration** :

**Relevant Logs or Screenshots** : Invoke-RestMethod : {“error”:{“root\_cause”:[{“type”:“security\_exception”,“reason”:“no permissions for [cluster:admin/opendistro/asynchronous\_search/submit] and User  
, requestedTenant=null]”}],“type”:“security\_exception”,“reason”:"no permissions for  
[cluster:admin/opendistro/asynchronous\_search/submit] and User , backend\_roles=,“status”:403:

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [July 30, 2026, 6:17pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228/2 "2026-07-30T18:17:58Z")

</div>

@hitesh303 Have you tried with securityadmin.sh tool?

---

<div class="post-metadata">

**Author:** ![hitesh303](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@hitesh303](https://forum.opensearch.org/u/hitesh303)\
**Post date:** [July 30, 2026, 6:35pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228/3 "2026-07-30T18:35:55Z")

</div>

Hi Pablo,

No, but We tried from devtools and it works. The UI side can’t update permissions directly on roles.

Thanks!

Hitesh

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [July 31, 2026, 4:05pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228/4 "2026-07-31T16:05:55Z")

</div>

@hitesh303 If the permission isn’t listed under the cluster permissions, then you must use securityadmin.sh and roles.yaml file.

What do you mean by “it works in DevTools”? Could you share the query you ran when you encountered this error?

---

<div class="post-metadata">

**Author:** ![hitesh303](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@hitesh303](https://forum.opensearch.org/u/hitesh303)\
**Post date:** [July 31, 2026, 4:46pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228/5 "2026-07-31T16:46:05Z")

</div>

Hi Pablo,

This is API call from devtools we ran:

```auto
PATCH _plugins/_security/api/roles/test_role
[
  {
    "op": "add",
    "path": "/cluster_permissions",
    "value": [
      "cluster:admin/opensearch/asynchronous_search/submit",
      "cluster:admin/opensearch/asynchronous_search/get",
      "cluster:admin/opensearch/asynchronous_search/delete"
    ]
  }
]

```

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [July 31, 2026, 5:38pm UTC](https://forum.opensearch.org/t/asynchronous-search-permissions/28228/6 "2026-07-31T17:38:27Z")

</div>

@hitesh303 Thanks for sharing. Yes, that’s the other way to update the role with custom permissions.  
Please also consider using securityadmin.sh as a backup of all your security configuration.