BUG Opendistro(1.8) kibana_read_only role not working in elastic 7.7

Security
5

In ODFE 1.7.0, I got this working doing the following:

  • I assigned my user the backend role of “KibanaReadOnlyUsers” (which does not exist)
  • I then played with the roles mappings:
  • Created role-mapping between “KibanaReadOnlyUsers” and “kibana_read_only”
    • I see what you show in the screenshot; able to log into Kibana but only the DASHBOARD icon is displayed in the left-hand menu and no dashboards are listed in the right-hand panel.
  • Added role-mapping between “KibanaReadOnlyUsers” and “kibana_user”
    • After logging in, Dashboard icon is the only one listed in the left hand menu (as-above), but my dashboards are listed in the right-hand panel. When I select a dashboard, it comes up but with no data displayed and errrors are displayed complaining about a security exception.
  • Created a new role “cluster_and_index_access” with the following:
    • Cluster Permissions: cluster_composite_ops_ro
    • Index Permissions:
      • Index pattern: “myIndex-*”
      • Permissions: Action Groups: “search”
  • Added a role-mapping between the new role “cluster_and_index_access” and the backend role “KibanaReadOnlyUsers”
    • When I log in now, I see my dashboards and when I bring up my dashboard, I see my data. Success!

It may be possible to combine some of those steps and/or directly assign some of the roles to the user.