# Open Distro Security Role Index Pattern Permission Forbidden

**URL:** <https://forum.opensearch.org/t/open-distro-security-role-index-pattern-permission-forbidden/3720>\
**Category:** Security\
**Created:** [September 9, 2020, 7:18pm UTC](https://forum.opensearch.org/t/open-distro-security-role-index-pattern-permission-forbidden/3720 "2020-09-09T19:18:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ryzen71](https://avatars.discourse-cdn.com/v4/letter/r/e47c2d/32.png) [@Ryzen71](https://forum.opensearch.org/u/Ryzen71)\
**Post date:** [September 9, 2020, 7:18pm UTC](https://forum.opensearch.org/t/open-distro-security-role-index-pattern-permission-forbidden/3720/1 "2020-09-09T19:18:24Z")

</div>

I’m having permission problem with index pattern used in a role, every time I want to create a index I got a 403.When I created the role everything works fine, but a couple days ago, began this problem. The index pattern name is log\* and the permission actions is unlimited, but the funny thing is, when I replace log\* for only \*, I can create the index.

The message erro is this:  
`"message":"POST /api/saved_objects/index-pattern 403" `

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [March 15, 2021, 8:41pm UTC](https://forum.opensearch.org/t/open-distro-security-role-index-pattern-permission-forbidden/3720/2 "2021-03-15T20:41:02Z")

</div>

@Ryzen71 Can you provide the role configuration from roles.yml file?  
also, are you using multi-tenancy?