Can a normal user get API read/write permissions?

Elastic Stack Kibana
1

Dear all =)

Is it possible for a normal Kibana user to have API read/write permissions?

What I would like to be to do is create and delete Kibana Alerts, but when I do

$ curl -u sandra -X POST "https://kibana.example.com/s/example/api/alerts/rule -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d @create.json

I get 404 indicating I am missing a write permission.

From my understand Kibana Spaces should allow to users (or API keys) to get read/write access to specific spaces. Is that correct and if so, does that also apply for the API?

Hugs,
Sandra =)

2

Are you sure space exists? I would expect a 403 if you didn't have permission to the resource. 404 indicates it doesn't exist.

1 Like
3

@tylersmalley Thanks a lot for pointing that out! That helped me to find the problem =)

The abovecurl command is messed up from a bad copy/paste. It should have been

url="https://example.com/s/example/api/alerts/alert"
curl -u "x:x" -X POST $url \
     -H 'kbn-xsrf: true' -H 'Content-Type: application/json' \
     -d '{"a":"a"}'

Here I used the URL that I dumped from Chrome, but according to the doc I should have used

/api/alerting/rule instead of /api/alerts/alert.

What is the difference of the two?

I am so happy, that is works now. Thanks again =)

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.