Action indices:data/read/mget is unauthorized but privilege listed

Elastic Stack Elasticsearch
16

Questions about editing shield's config files.

  • In role_mapping.yml, it seems you can use two syntaxes:
 cdfoote:
   - "uid=cdfoote,..."

or:

cdfoote: [
  "uid=cdfoote,..."
    ]

Are they compatible within the one file or do you need to use one or the other?

  • In roles.yml, similarly you can set privileges two ways:

privileges: indices:admin/mappings/fields/get, admin/get, ...

or:

privileges:
  - indices:admin/mappings/fields/get
  - admin/get
  - ...

Are they compatible within the same file or do you have to choose one or the other?

  • Does the number of spaces indenting child lines need to be consistent? Is two spaces OK?

  • Does the order of the entries make a difference? Can a formatting error somewhere in a file cause earlier entries to work but later entries to fail?