Data streams - forbbiden response

Hello,

We are using Kibana and ES 7.12.1 with ROR Enterprise 1.39.0. For a user which has admin rights, as indicated in the below ROR block:

  - name: "Full Admin Kibana"
    groups: ["full-admin"]
    indices: ["*"]
    kibana_access: "admin"
  - name: "Full Admin Users"
    groups: ["full-admin"]
    indices: ["*"]
    actions: ["*"]

we try to create data streams and it results in a forbidden result.
More precise, from dev tools, we use the following request:


PUT _data_stream/my-data-stream

and the response:

{
  "error" : {
    "root_cause" : [
      {
        "type" : "forbidden_response",
        "reason" : "forbidden",
        "due_to" : "OPERATION_NOT_ALLOWED"
      }
    ],
    "type" : "forbidden_response",
    "reason" : "forbidden",
    "due_to" : "OPERATION_NOT_ALLOWED"
  },
  "status" : 403
}

There are no forbidden requests in logs which is rather strange.

Also if we perform the same request to the ES server directly the response it’s the same.

Can you please help us?

Hi @Diana

Thanks for reporting this.
It looks like this is the same problem it was reported here.
The good news is that we are currently working on it, so it should be fixed soon. We will let you know!