# Read-only users unable to save search in order to download the csv report

**URL:** <https://forum.opensearch.org/t/read-only-users-unable-to-save-search-in-order-to-download-the-csv-report/6933>\
**Category:** Security\
**Created:** [September 6, 2021, 9:05am UTC](https://forum.opensearch.org/t/read-only-users-unable-to-save-search-in-order-to-download-the-csv-report/6933 "2021-09-06T09:05:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaimoh](https://avatars.discourse-cdn.com/v4/letter/s/4da419/32.png) [@shaimoh](https://forum.opensearch.org/u/shaimoh)\
**Post date:** [September 6, 2021, 9:05am UTC](https://forum.opensearch.org/t/read-only-users-unable-to-save-search-in-order-to-download-the-csv-report/6933/1 "2021-09-06T09:05:18Z")

</div>

Hi Team,

I have assigned users with read only access as below

cluster permissions: cluster\_composite\_ops-ro  
Index permission: read

Users are able to access the provided indices with readonly permissions however they are unable to save the search and download the csv report

Am I missing to add any of the permission to the role ? pls help

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [September 6, 2021, 12:42pm UTC](https://forum.opensearch.org/t/read-only-users-unable-to-save-search-in-order-to-download-the-csv-report/6933/2 "2021-09-06T12:42:56Z")

</div>

@shaimoh  
Which version of odfe/OS are you using?

Testing with opensearch 1.0.0, I mapped users to below roles and was able to save searches and download on demand reports:

kibana\_user (built-in)  
readall (built-in)  
additional\_role (custom, see below)

```auto
additional_role:
  index_permissions:
    - index_patterns:
        - '*'
      allowed_actions:
        - "indices:monitor/settings/get"
  cluster_permissions:
    - cluster:admin/opensearch/reports/menu/download

```

---

<div class="post-metadata">

**Author:** ![shaimoh](https://avatars.discourse-cdn.com/v4/letter/s/4da419/32.png) [@shaimoh](https://forum.opensearch.org/u/shaimoh)\
**Post date:** [September 6, 2021, 1:28pm UTC](https://forum.opensearch.org/t/read-only-users-unable-to-save-search-in-order-to-download-the-csv-report/6933/3 "2021-09-06T13:28:55Z")

</div>

@Anthony thanks for replying

I am using AWS managed elasticsearch and Kibana. should be [v1.13.2].

I added the roles you suggested in cluster and index permission however the readonly users are still unable to save any search

Error: “Your search was not saved”

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [September 6, 2021, 2:52pm UTC](https://forum.opensearch.org/t/read-only-users-unable-to-save-search-in-order-to-download-the-csv-report/6933/4 "2021-09-06T14:52:05Z")

</div>

@shaimoh  
Could you please login as read only user and run the below from dev tools and paste the result here:

GET \_opendistro/\_security/authinfo?pretty

Then login as admin, run the below call:

GET \_opendistro/\_security/api/roles/\<additional/custom\_role\> (role that was created to use reports)