Comments (4)
@opensearch-project/admin please re-direct to security dashboards repo.
from security-dashboards-plugin.
[Triage] - @FrcMoya would you be able to provide some more information about your issue/setup - permissions/mappings for a tenant that you think is working correctly? Once we understand more about your setup we can see if it is a bug or misconfiguration, thanks! Not marking this as triaged just yet.
from security-dashboards-plugin.
[Triage] Hi @FrcMoya just following up. If we don't hear from you I will go ahead and close this as an expected misconfiguration. Thanks.
from security-dashboards-plugin.
Hi everyone, I will try to explain this using some screenshots.
On one hand, if you want to allow a role (internal role inside OpenSearch) read only (it is my particular case) to the global tenant it is mandatory to at least give them permission to read_only in the global tenant plus these indexes:
On the other hand, if you want to allow a role permissions to any other tenant created by the OpenSearch Dashboards administrator (a custom tenant), it is no mandatory to give permissions to any indexes in particular, it is only necessary the read only permission in the corresponding tenant:
For me this is a strange behavior and it is not documented, it was a trial and error process until I got the configuration I needed. If all this configuration is correct and the behavior is expected, I believe it is necessary to document it, since they are not obvious requirements.
from security-dashboards-plugin.
Related Issues (20)
- [RELEASE] Release version 2.16.0 HOT 2
- [Enhancement] Remove service account code in main HOT 2
- [FEATURE] Deprecate/remove aggregation view HOT 1
- [FEATURE] Support JDK 21 for main branch HOT 1
- [BUG] Remove AOSS data sources from the data source picker HOT 1
- [AUTOCUT] Integration Test failed for securityDashboards: 2.15.0 HOT 6
- [BUG] Missing OIDC refresh token calls in case of expired id token HOT 1
- [RELEASE] Release version 2.15.0 HOT 2
- [BUG] Tenant is defaulting incorrectly based on the ordering of: opensearch_security.multitenancy.tenants.preferred HOT 4
- [FEATURE] Security Plugin Navigation Changes HOT 1
- [BUG] Session expiration and keepalive settings ignored HOT 2
- [BUG] Missing background refresh of OIDC access_token (for /app/dashboards) HOT 1
- [AUTOCUT] Integration Test failed for securityDashboards: 1.3.18 HOT 2
- Read-only user doesn't see Discover menu HOT 4
- [AUTOCUT] Distribution Build Failed for securityDashboards-2.16.0 HOT 2
- [BUG] Build.sh script failure HOT 2
- [BUG] Creating index_pattern via API/Curl for global tenant doesn't work HOT 3
- [FEATURE] Create a E2E for OIDC IdP behind a proxy HOT 1
- [FEATURE] Retry Bootstrap Step for OSD HOT 1
- [AUTOCUT] Integration Test failed for securityDashboards: 2.16.0
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from security-dashboards-plugin.