Observability dashboard

Hi,

I have added backend role observability_full_access defined in role.yml as below.

observability_full_access:
reserved: false
hidden: false
cluster_permissions:
- cluster:admin/opensearch/observability/create
- cluster:admin/opensearch/observability/update
- cluster:admin/opensearch/observability/delete
- cluster:admin/opensearch/observability/get
index_permissions:

  • index_patterns:
    - “.opensearch-observability”
    allowed_actions:
    • write
    • read
    • search

And I have then added observability_full_access role as backend role to the user. But still unable to create Observability dashboard in OpenSearch Dashboard UI and getting permission error.

@sayalipatil9689 What other roles did you assigned to that user?

@sayalipatil9689 If that’s the only role, please be aware that your user needs read/write access to the .kibana index as Observability dashboards are OpenSeach Dashboards objects and are stored in the mentioned index.
You can either assign the kibanauser backend role to the user or include .kibana index in the existing role.

1 Like

In same role if I add one more index pattern “.kibana” with read/write access, will it work?

@sayalipatil9689 Yes. You can add another index permission with .kibana in the same role or add .kibana index to the existing index permission if the permissions are wide enough.

Please be aware that .kibana indices may have different suffixes. In that case you should consider .kibana* pattern.

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.