Nash
1
Versions
opensearch-2.13.0-1
Describe the issue:
I need to create a user (role: create_users) that can create and users with read_dashboars roles.
read_dashboars roles:
cluster_composite_ops_ro
cluster:admin/opendistro/reports/*
The create_users roles should get least privilege to create those users.
I should be great that the create_users could create read_dashboars users with dashboards UI, but using the API should be enouth.
What cluster permission should I configure?
Thanks in advance
Mantas
2
Hi @Nash,
The cluster_composite_ops
Should give enough permissions to create users.
Best,
mj
1 Like
Nash
3
Thanks but it’s not working.
I’ve create a role with cluster_composite_ops.
When I login with this role, the security panel is unavaible.
Edit: Solution
I’ve used the role security_rest_api_access.
It work but it’s give lot of priviledges.
Not sure it’s the best way to do it, but works.
I’m still looking for the least priviledge role to create users.