Disable the tenants selection for a users that have access to a single tenant

Security
1

OpenSearch 2.11.0
Hi community. I would like to have possibility of allowing users to see only a tenant which they have access to.
For example a have users with a backend role user, i create a role with cluster_composite_ops_ro and cluster_monitor cluster permissions and tenant global_tenant and map user as a backend role. Also I add backend role user to kibana_read_only.
When I login with my user I see:

  1. Welcome page
  2. Introducing new OpenSearch Dashboards look & feel
  3. Tenant selection page where I have only one Global_tenant availiable.

My goal is to be forwarded to dashboards page of a tenant that this user has access avoiding pop ups and tenant selection.

opensearch/config.yml

config:
 dynamic:
#   opensearch-dashboards:
   kibana:
      multitenancy_enabled: true
      private_tenant_enabled: false
      default_tenant: global_tenant
      server_username: kibanaserver
      index: '.kibana'
   do_not_fail_on_forbidden: true

dashboard/opensearch_dashboards.yml

opensearch_security.multitenancy.enabled: true
#opendistro_security.multitenancy.tenants.enable_global: true
opensearch_security.multitenancy.tenants.enable_private: false
opensearch_security.multitenancy.tenants.preferred: ["Global"]
opensearch_security.readonly_mode.roles: [kibana_read_only]

In OpenDistro the users that have access only to a single tenant was forwarded directly to this tenant.
Did I miss something in configuration?

2

By changing default route to dashboards, adding data and replacing global_tenant → Global

config:
 dynamic:
#   opensearch-dashboards:
   kibana:
      multitenancy_enabled: true
      private_tenant_enabled: false
      default_tenant: Global
      server_username: kibanaserver
      index: '.kibana'
   do_not_fail_on_forbidden: true

When I login with my account I see:

image
image961×823 67.4 KB

After clicking Confirm I’m redirected to dashboards page witch is what is what I would like to have, but still would like to avoid to showing the tenant selection if that is some how possible.
In OpenDistro as I already said users that have access only to one tenant aren’t asked to choose a tenant.

3

Hi @ogulman,

You can choose a default tenant in your OpenSearch Dashboards Security/Tenants [Configure (tab)]:
image

image
image714×329 17.3 KB

This will allow you to default all users to a selected tenant when they log in for the first time.

Let me know if you have any further questions.

Best,
Mantas

4

Hi Mantas,
I have set Global tenant as default:

   kibana:
      multitenancy_enabled: true
      private_tenant_enabled: false
      default_tenant: Global

but users who had access only to Global still asking to select a tenant on a first login:

image
image958×669 41.8 KB

5

I am experiencing the same behaviour in my lab too. I can’t seem to find any workaround either.
You can file it here: Issues · opensearch-project/OpenSearch-Dashboards · GitHub

Cheers,
Mantas