Restrict Export Capability

OpenSearch
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch Dashboard v2.13.0

Describe the issue: Is there are way to restrict/lockdown the export capability? We have a requirement to allow users to created dashboards but to prevent them from exporting the data.

Configuration:

Relevant Logs or Screenshots:

2

Hi @Tammy,

A few things to make sure of are that the users have the least privileged access, something like:

  "index_permissions": [
    {
      "index_patterns": ["<necessary_index> "],
      "allowed_actions": ["read", "indices:data/read/search"]
    }

Make sure user access to the reporting is limited as per (indices: .opendistro-reports-*): Permissions - OpenSearch Documentation

Moreover, you could enable audit logs to monitor the activity (such as data export) on your cluster: Audit logs - OpenSearch Documentation

Best,
mj