Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Read-only user doesn't see Discover menu #2037

Open
john047 opened this issue Jul 10, 2024 · 4 comments
Open

Read-only user doesn't see Discover menu #2037

john047 opened this issue Jul 10, 2024 · 4 comments
Labels

Comments

@john047
Copy link

john047 commented Jul 10, 2024

Hi,

  1. added tenant
  2. created read_only_index role and maped three roles to the read-only user:
    https://opensearch.org/docs/1.0/security-plugin/access-control/users-roles/#set-up-a-read-only-user-in-opensearch-dashboards

After that read-only user doesn't see "Discover" menu on the left, there are only dashboards that need to be created.
It is required that the read-only user has access to the logs of a specific index that were defined when creating the read_only_index role.

Help, please.

@john047
Copy link
Author

john047 commented Jul 10, 2024

How can I make the Discover menu available to the reade-only user, without assigning an all_access role, as in the picture from the documentation?
https://opensearch.org/docs/2.15/security/access-control/users-roles/#opensearch-dashboards-readonly_mode

@john047
Copy link
Author

john047 commented Jul 10, 2024

Deployment via helm is contained in the config by default: opensearch_security.readonly_mode.roles: [kibana_read_only].
Also from the documentation https://opensearch.org/docs/1.0/security-plugin/access-control/users-roles/#set-up-a-read-only-user-in-opensearch-dashboards to add kibana_read_only role to a new user.
Deleted this role and got the desired result.

@kavilla
Copy link
Member

kavilla commented Jul 16, 2024

Hello @john047, thank you for opening.

@opensearch-project/admin please redirect to security dashboards team please.

@kavilla kavilla removed the untriaged label Jul 16, 2024
@gaiksaya gaiksaya transferred this issue from opensearch-project/OpenSearch-Dashboards Jul 16, 2024
@stephen-crawford
Copy link
Contributor

[Triage] Hi @john047, thanks for filing this issue. This looks a possible issue with either documentation or the configuration settings so someone will need to review your scenario and address accordingly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants