Can't create user with role using Kibana GUI

Security
1

I am trying to create a user using the Kibana GUI. I am following these steps:

  1. Open Kibana
  2. Log in as admin
  3. Security> Internal User Database> Add a new internal user
  4. Provide username and password
  5. In the Open Distro Security Rolesds field, select the role
  6. Click Add backend role

But instead of creating a user, there is a redirect to the authorization page /login?Type=basicauthLogout
I am running odfe in docker. I am using the demo config provided by the docker image.
Images version 1.9.0

In the kibana log:
odfe-kibana | {"type":"response","@timestamp":"2020-09-07T14:22:15Z","tags":[],"pid":1,"method":"post","statusCode":403,"req":{"url":"/api/v1/configuration/internalusers/test","method":"post","headers":{"host":"192.168.1.3:5601","connection":"keep-alive","content-length":"97","accept":"application/json, text/plain, */*","kbn-version":"7.8.0","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36","content-type":"application/json;charset=UTF-8","origin":"http://192.168.1.3:5601","referer":"http://192.168.1.3:5601/app/security-configuration","accept-encoding":"gzip, deflate","accept-language":"ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7","securitytenant":"__user__"},"remoteAddress":"11.11.11.11","userAgent":"11.11.11.11","referer":"http://192.168.1.3:5601/app/security-configuration"},"res":{"statusCode":403,"responseTime":14,"contentLength":9},"message":"POST /api/v1/configuration/internalusers/test 403 14ms - 9.0B"}

In the elastic log:

odfe-node1    | [2020-09-07T14:21:56,376][INFO ][stdout                   ] [odfe-node1] [FINE] No subscribers registered for event class com.amazon.opendistroforelasticsearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
odfe-node1    | [2020-09-07T14:21:56,376][INFO ][stdout                   ] [odfe-node1] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent

What could be the problem? What settings are missing?

Thanks!

2

@nik360 this seems to be a bug in 1.9. The option to add backend roles was removed in versions 1.10-12 inclusive, 1.13 however has the option again and seems to work as expected. If you need this functionality perhaps upgrading to 1.13.0 would be the simplest solution?