New user can access _cluster/health but not _cluster/health/*kibana*

I am unsure if I should post here or in forum.search-guard.com.
I have seen questions about opendistrosecurity in both places.

Here is my post where I tried to configure a user to be able to read

`

> _cluster/health/*kibana*

`

It seems that many folks have run into a similar error message, but I have not seen any solutions.
Maybe the error message is misleading and that the actual error is in the roles.yml configuration?

I pasted my solution in the search guard forum topic linked to above.