Hi,
I have given user a backend role as kibana_ready_only, because of which he can only able to access. Refer below image. When I click on dashboards, it takes me to dashboard list page correctly.
But when I try to open dashboard from home page, it gives me Application not found error.
How to have access to dahsboards list from dashboards as well as from opensearch_dashboards_overview. But user should not have access to any other action than viewing the dashboards as he is having dashboard reader role
Hi @sayalipatil9689,
Which version of OpenSearch and OpenSearch Dashboards are you using? Could you share the list of roles mapped to the user?
Hi,
Below is the custom role I have created which is mapped with kibana_read_only role.
roles.yml
reader:
reserved: false
hidden: false
cluster_permissions:
- cluster_composite_ops_ro
- ‘cluster:admin/opensearch/ql/datasources/read’
index_permissions:
- index_patterns:
- “test_index”
dls: “”
allowed_actions:
- ‘indices:admin/resolve/index’
- ‘indices:data/read/field_caps’
- ‘indices:data/read/search’
- ‘indices:data/read/get’
- ‘indices:admin/mappings/get’
- ‘indices:monitor/settings/get’
- ‘indices:admin/aliases/get’
- ‘indices:data/read/search*’
- ‘search’
- ‘read’
- index_patterns:
- “.kibana*”
allowed_actions:
- ‘indices:data/read/search’
- ‘indices:data/write/update’
- ‘indices:data/write/index’
- ‘indices:data/write/bulk’
- ‘indices:data/read/get’
- ‘indices:data/read/mget[shard]’
tenant_permissions:
- tenant_patterns:
- “*”
allowed_actions:
- ‘read’
- ‘write’
static: false
roles_mapping.yml
kibana_read_only:
reserved: false
backend_roles:
- “reader”
description: “Maps kibanauser to kibana_user”
reader:
reserved: false
backend_roles:
Please share the output of the following commands:
GET _plugins/_security/api/internalusers/<your-username>
GET _plugins/_security/api/roles/reader
Sorry, but I am not having access to execute these two GET APIs in my project. I am having access to only yml files to add roles and map them. Hence shared the yml configurations for the same.
@sayalipatil9689 ,
Have you applied changes for your configuration files?