Role permission for creating users with read_all & reports privilege?

OpenSearch
1

Versions
opensearch-2.13.0-1

Describe the issue:
I need to create a user (role: create_users) that can create and users with read_dashboars roles.

read_dashboars roles:
cluster_composite_ops_ro
cluster:admin/opendistro/reports/*

The create_users roles should get least privilege to create those users.

I should be great that the create_users could create read_dashboars users with dashboards UI, but using the API should be enouth.

What cluster permission should I configure?

Thanks in advance

2

Hi @Nash,

The cluster_composite_ops Should give enough permissions to create users.

Best,
mj

1 Like
3

Thanks but it’s not working.

I’ve create a role with cluster_composite_ops.

When I login with this role, the security panel is unavaible.

Edit: Solution

I’ve used the role security_rest_api_access.

It work but it’s give lot of priviledges.

Not sure it’s the best way to do it, but works.

I’m still looking for the least priviledge role to create users.