Deleting user from roles mapping

Security
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
2.8.0.

Describe the issue:
I’m in the process of doing some automation, and I’d like to delete some users from roles mapping.

I’m tring with the following (and it’s variuos combunations), I get that the "‘ROLENAME updated’, but no change, the user is still there, in this example, “myuser3”.

PATCH /_plugins/_security/api/rolesmapping/ROLENAME
[
    {
        "op": "remove",
        "path": [
            "/users"
        ],
        "value": "myuser3"
    }
]

Could somebody help me with this please? Am I missing something?

Thanks,
Andras

2

@andraspavelbaystream Did you configure this option in opensearch.yml?

plugins.security.unsupported.restapi.allow_securityconfig_modification: true
3

Hi Pablo,

I didn’t have it configured. I enabled it now, restarted the services, but still no change, the users are not deleted.

Do you have any other suggestion?

Thank you!