Hi @jp.lee As far as I know the only index that is causing this permission error is is the security index (.opendistro_security). The rest of the indices should work without issue. Admin user doesn’t have the permission either and to the best of my knowledge the only way to manipulate that index is to use admin certificate with curl, as follows:
curl -XPUT "https://localhost:9200/.opendistro_security/_settings" -H 'Content-Type: application/json' -d'{ "index": { "number_of_replicas":0, "auto_expand_replicas": false }}' -k --cert /usr/share/elasticsearch/config/kirk.pem --key /usr/share/elasticsearch/config/kirk-key.pem