# Permission indices:admin/data\_stream/get does not work

**URL:** <https://forum.opensearch.org/t/permission-indices-admin-data-stream-get-does-not-work/18256>\
**Category:** Security\
**Created:** [March 5, 2024, 4:10pm UTC](https://forum.opensearch.org/t/permission-indices-admin-data-stream-get-does-not-work/18256 "2024-03-05T16:10:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![flo](https://avatars.discourse-cdn.com/v4/letter/f/b38774/32.png) [@flo](https://forum.opensearch.org/u/flo)\
**Post date:** [March 5, 2024, 4:10pm UTC](https://forum.opensearch.org/t/permission-indices-admin-data-stream-get-does-not-work/18256/1 "2024-03-05T16:10:35Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
Opensearch 2.12

**Describe the issue** :  
I try to write to a data stream using fluentd opensearch plugin. There i get the message:  
no permissions for [indices:admin/data\_stream/get] and User [name=logstash, backend\_roles=[logstash]

**Configuration** :

```auto
roles_mapping.yml:
logstash_lrz:
          reserved: false
          users:
          - "logstash"

roles.yml:
logstash_lrz:
          reserved: true
          cluster_permissions:
            - "cluster_monitor"
            - "cluster_composite_ops"
            - "indices:admin/template/get"
            - "indices:admin/template/put"
            - "cluster:admin/ingest/pipeline/put"
            - "cluster:admin/ingest/pipeline/get"
            - "indices:admin/data_stream/get"
            - "indices:admin/data_stream/create"
            - "indices:admin/index_template/get"
            - "indices:admin/resolve/index"
            - "indices:admin/aliases/get"
            - "indices:monitor/settings/get"
            - "indices:monitor/stats"
            - "indices:monitor/recovery"
            - "indices:data/read/search"
          index_permissions:
            - index_patterns:
                - "logstash-*"
                - "kube-*"
                - "logs-syslog*"
                - "*beat*"
                - "*fluentd*"
                - "*pfelk*"
              allowed_actions:
                - "crud"
                - "create_index"

```

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![flo](https://avatars.discourse-cdn.com/v4/letter/f/b38774/32.png) [@flo](https://forum.opensearch.org/u/flo)\
**Post date:** [March 5, 2024, 4:40pm UTC](https://forum.opensearch.org/t/permission-indices-admin-data-stream-get-does-not-work/18256/2 "2024-03-05T16:40:47Z")

</div>

10 minutes after writing this post, i realized, that

```auto
indices:admin/data_stream/get

```

and others cannot be listed under cluster\_permissions, but have to be listed under index\_permissions → allowed\_actions.

Fixed.