security-dashboards-plugin icon indicating copy to clipboard operation
security-dashboards-plugin copied to clipboard

Read-only user doesn't see Discover menu

Open john047 opened this issue 1 year ago • 4 comments

Hi,

  1. added tenant
  2. created read_only_index role and maped three roles to the read-only user: https://opensearch.org/docs/1.0/security-plugin/access-control/users-roles/#set-up-a-read-only-user-in-opensearch-dashboards

After that read-only user doesn't see "Discover" menu on the left, there are only dashboards that need to be created. It is required that the read-only user has access to the logs of a specific index that were defined when creating the read_only_index role.

Help, please.

john047 avatar Jul 10 '24 15:07 john047

How can I make the Discover menu available to the reade-only user, without assigning an all_access role, as in the picture from the documentation? https://opensearch.org/docs/2.15/security/access-control/users-roles/#opensearch-dashboards-readonly_mode

john047 avatar Jul 10 '24 21:07 john047

Deployment via helm is contained in the config by default: opensearch_security.readonly_mode.roles: [kibana_read_only]. Also from the documentation https://opensearch.org/docs/1.0/security-plugin/access-control/users-roles/#set-up-a-read-only-user-in-opensearch-dashboards to add kibana_read_only role to a new user. Deleted this role and got the desired result.

john047 avatar Jul 10 '24 22:07 john047

Hello @john047, thank you for opening.

@opensearch-project/admin please redirect to security dashboards team please.

kavilla avatar Jul 16 '24 17:07 kavilla

[Triage] Hi @john047, thanks for filing this issue. This looks a possible issue with either documentation or the configuration settings so someone will need to review your scenario and address accordingly.

stephen-crawford avatar Jul 22 '24 15:07 stephen-crawford