Hello,
We are using Kibana and ES 7.12.1 with ROR Enterprise 1.39.0. For a user which has admin rights, as indicated in the below ROR block:
- name: "Full Admin Kibana"
groups: ["full-admin"]
indices: ["*"]
kibana_access: "admin"
- name: "Full Admin Users"
groups: ["full-admin"]
indices: ["*"]
actions: ["*"]
we try to create data streams and it results in a forbidden result.
More precise, from dev tools, we use the following request:
PUT _data_stream/my-data-stream
and the response:
{
"error" : {
"root_cause" : [
{
"type" : "forbidden_response",
"reason" : "forbidden",
"due_to" : "OPERATION_NOT_ALLOWED"
}
],
"type" : "forbidden_response",
"reason" : "forbidden",
"due_to" : "OPERATION_NOT_ALLOWED"
},
"status" : 403
}
There are no forbidden requests in logs which is rather strange.
Also if we perform the same request to the ES server directly the response it’s the same.
Can you please help us?