Opensearch readonly user creation

OpenSearch
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
opensearch 2.9.0

Describe the issue:

How to create a readonly user in opensearch similar to readonly user in elastic search? Which of the permissions needed for this readonly user?

Configuration:

Relevant Logs or Screenshots:

Screenshot 2023-09-19 16.31.19
Screenshot 2023-09-19 16.31.19914×141 12.6 KB

2

Hi @peaky

Have you tried the following example?

3

Yes i have tried that example and not viewing the dashboards. i have applied several permissions but still not displaying any dashboards

4

Hi @peaky!

Please try to add kibana_user and read_only_index roles for your user.

5

Hi @Eugene7

There is no such “read_only_index” role in the opensearch. The “kibana_user” role is not a readonly user. so we can’t use that. Please suggest a solution

6

Hi @peaky,

Please try the following steps:

  1. Create the read_only_index role as described in the following documentation: Users and roles - OpenSearch documentation
  2. Add the indices:data/read/search permission for the read_only_index role.
  3. Create the opensearch_dashboards_read_only role with the read permission for the .kibana* and .opensearch_dashboards* indexes.