I have a group that I created for certain users. the users of that group should have the ability to create any visualizations/dashboards, mess around with discover on the index, etc.
I’d like them to be able to create/modify/delete their own indexes but not modify or delete the core data indexes.
I started by creating the group as outlined in the multitenancy docs.
kibana_hide_apps - hiding apm, monitoring, uptime, ROR and infrastructure
then the user is sha256 to the group.
I was getting errors trying to log in as the user so i added actions to the group.
actions:[“indices:admin/create”,"…"] - basically any error i added the action here. and most of the errors went away and the user is okay to log in but then when they try to add an index with Dev Tools i keep getting the error of
USR: [user not logged in]
The user is connected via sha256 and the action is already in the action line for the group. What am I missing - and how do I limit the user to what I want them to be able to do?