ROR is working as expected, because the
kibana_access: admin does NOT give you write access to all the indices. But it means you can do everything within Kibana. Creating or updating arbitrary indices is not a Kibana task.
If you want “absolute powers” on your cluster, omit the kibana_access rule all together.