# How to add a new user and role to access a specific index with Read and write

**URL:** <https://forum.opensearch.org/t/how-to-add-a-new-user-and-role-to-access-a-specific-index-with-read-and-write/17060>\
**Category:** Security\
**Tags:** security-issue\
**Created:** [December 12, 2023, 11:35pm UTC](https://forum.opensearch.org/t/how-to-add-a-new-user-and-role-to-access-a-specific-index-with-read-and-write/17060 "2023-12-12T23:35:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![joemily](https://avatars.discourse-cdn.com/v4/letter/j/7993a0/32.png) [@joemily](https://forum.opensearch.org/u/joemily)\
**Post date:** [December 12, 2023, 11:35pm UTC](https://forum.opensearch.org/t/how-to-add-a-new-user-and-role-to-access-a-specific-index-with-read-and-write/17060/1 "2023-12-12T23:35:03Z")

</div>

\*\*Versions \*\* (relevant - OpenSearch/Dashboard/Server OS/Browser):

latest 2.11.1, Opensearch Security

**Describe the issue** :  
add a new role and limit a specific index permission, add a user, set opendistro\_security\_roles as this role, but nothing shown in Dashboard, unless set the all\_access. But all\_access is not expected.

**Configuration** :  
API\*\*

```
"index_premium_access": {
    "reserved": false,
    "hidden": false,
    "cluster_permissions": [
        "*"
    ],
    "index_permissions": [
        {
            "index_patterns": [
                "premium*"
            ],
            "fls": [],
            "masked_fields": [],
            "allowed_actions": [
                "*"
            ]
        }
    ],
    "tenant_permissions": [
        {
            "tenant_patterns": [
                "*"
            ],
            "allowed_actions": [
                "kibana_all_write"
            ]
        }
    ],
    "static": false
},

"fgcloud": {
    "hash": "",
    "reserved": false,
    "hidden": false,
    "backend_roles": [],
    "attributes": {},
    "opendistro_security_roles": [
        "index_premium_access"
    ],
    "static": false
},

```

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 14, 2023, 7:02pm UTC](https://forum.opensearch.org/t/how-to-add-a-new-user-and-role-to-access-a-specific-index-with-read-and-write/17060/2 "2023-12-14T19:02:24Z")

</div>

@joemily Did you use securityadmin.sh to apply your changes in the cluster?

> **[Applying changes to configuration files](https://opensearch.org/docs/latest/security/configuration/security-admin/)**
>
> Applying changes to configuration files