Hi @cdobbins,
To achieve the desired behaviour in OpenSearch with minimal permission you will need the following:
/opensearch/config/opensearch-security/config.yml
add:
config:
dynamic:
do_not_fail_on_forbidden: true
do_not_fail_on_forbidden_empty: true
...
Minimum permission required:
"cluster_permissions" : [
"cluster:monitor/state",
"cluster:monitor/health"
],
"index_permissions" : [
{
"index_patterns" : [
**List of index patterns**
],
"allowed_actions" : [
"indices:monitor/settings/get",
"indices:monitor/stats"
]
}
]
You can get more information on this here: [BUG] do_not_fail_on_forbidden_empty does not work for cat api · Issue #1815 · opensearch-project/security · GitHub and [Backport 2.x] Command `cat/indices` will filter results per the do not fail on forbidden setting by derek-ho · Pull Request #3258 · opensearch-project/security · GitHub
Best,
Mantas