Role permission for creating users with read_all & reports privilege?

[Nash]

Versions
opensearch-2.13.0-1

Describe the issue:
I need to create a user (role: create_users) that can create and users with read_dashboars roles.

read_dashboars roles:
cluster_composite_ops_ro
cluster:admin/opendistro/reports/*

The create_users roles should get least privilege to create those users.

I should be great that the create_users could create read_dashboars users with dashboards UI, but using the API should be enouth.

What cluster permission should I configure?

Thanks in advance

[Mantas]

Hi @Nash,

The cluster_composite_ops Should give enough permissions to create users.

Best,
mj

[Nash]

Thanks but it’s not working.

I’ve create a role with cluster_composite_ops.

When I login with this role, the security panel is unavaible.

Thanks in advance,