Action [indices:admin/flush[s]] is unauthorized for user [admin] with roles [superuser] on restricted indices [.kibana_task_manager_7.17.5_001], this action is granted by the index privileges [maintenance,manage,all]

Elastic Stack Elasticsearch
2

Hi @Leonardo_Henrique

run this...

GET _security/user/_privileges

I think you will see something like this..

  "indices": [
    {
      "names": [
        "*"
      ],
      "privileges": [
        "all"
      ],
      "allow_restricted_indices": false  <!----- this not for restricted indices... 
    },
    {
      "names": [
        "*"
      ],
      "privileges": [
        "monitor",
        "read",
        "read_cross_cluster",
        "view_index_metadata"
      ],
      "allow_restricted_indices": true <!----- this notice no write / manage etc
    }
  ],

So the superuser role does not grant everything...

If you want to _flush on all the system indices... you would need to create a role that allows that... manage for restricted indices...

This is by design to keep even super users from accidentally messing up their cluster.

See Here

Ohh and not all the volunteers on the site are Guys :slight_smile: