Cluster-permission indices:data/write/bulk needed for adding data?- implications?

I faced the same issue. I configured a role using the HTTP API that allows the user to only index and search data. The search part worked fine but the indexing was not working.

It kept throwing the below error. The only way to fix this was to add the indices:data/write/bulk permission to the cluster_permissions. What does this permission mean?

[security_exception] no permissions for [indices:data/write/bulk] and User [name=arn:aws:I am::<account_id>:user/my_user, backend_roles=[], requestedTenant=null]

My request body payload for the PUT /_opendistro/_security/api/roles/search_and_index HTTP API

{
    "cluster_permissions": [
    	"indices:data/write/bulk"
    ],
    "index_permissions": [
        {
            "index_patterns": [
                "*"
            ],
            "dls": "",
            "fls": [],
            "masked_fields": [],
            "allowed_actions": [
                "indices:data/read/explain",
                "indices:data/read/field_caps",
                "indices:data/read/field_caps*",
                "indices:data/read/get",
                "indices:data/read/mget",
                "indices:data/read/mget*",
                "indices:data/read/msearch",
                "indices:data/read/msearch/template",
                "indices:data/read/mtv",
                "indices:data/read/mtv*",
                "indices:data/read/scroll",
                "indices:data/read/scroll/clear",
                "indices:data/read/search",
                "indices:data/read/search*",
                "indices:data/read/search/template",
                "indices:data/read/tv",
                "indices:data/write/bulk",
                "indices:data/write/bulk*",
                "indices:data/write/delete",
                "indices:data/write/delete/byquery",
                "indices:data/write/index",
                "indices:data/write/reindex",
                "indices:data/write/update",
                "indices:data/write/update/byquery"
            ]
        }
    ]
}