Unable to create index Pattern on Dashboard

OpenDistro
,
1

Hello,

I don’t work to create index Pattern in Dashboard.

Here my role :

{
  "g_app_gnarly_moe" : {
    "reserved" : false,
    "hidden" : false,
    "cluster_permissions" : [
      "cluster_composite_ops_ro",
     "cluster_monitor"
    ],
    "index_permissions" : [
      {
        "index_patterns" : [
          "z_app_gnarly_es_socle_cdr*",
          "z_app_gnarly_es_socle_kpi*",
          "z_app_gnarly_es_socle_param*",
          "z_app_gnarly_es_testnr*"
        ],
        "allowed_actions" : [
          "indices:admin/aliases/exists",
          "indices:admin/aliases/get",
          "indices:admin/exists",
          "indices:admin/get",
          "indices:admin/mappings/fields/get*",
          "indices:admin/mappings/get",
          "indices:admin/validate/query",
          "indices:data/read/*",
          "indices:data/read/search",
          "indices:admin/resolve/index"
        ]
      },
      {
        "index_patterns" : [
          ".kibana*gnarly"
        ],
        "allowed_actions" : [
          "crud"
        ]
      }
    ],
    "tenant_permissions" : [
      {
        "tenant_patterns" : [
          "app_gnarly"
        ],
        "allowed_actions" : [
          "kibana_all_write"
        ]
      }
    ],
    "static" : false
  }
}

I have a forbidden if i test to create index pattern with Dashboard.
(Log indicate me a probleme with indices:data/write/bulk. I tested to add this right in allowed_actions for .kibana*gnarly pattern).

Thanks for reply

Gnarly

2

Hello,

To bypass problems about patterns, i map kibana_user to everyone.

But i find is not secure… :frowning: