i have AD Setup and the backend roles are showing currently for users.
All my regular users should only be able to query the logs in kibana. Basically no write/update on the indexes.
Which security roles should i be granting at cluster and index levels for a role i created for them ?
Thanks
Did you resolve your issue? What ODFE version do you run?
I am running version 12…
These index permissions for a new role I created, seems to be working for me. I did not extensive testing.
read
indices:data/read/search
indices:data/read/search*
indices:data/read/get
indices:data/read/mget*
indices:data/read/scroll