Can i assign a kibana role to an openid realm based user through API

Elastic Stack Kibana
1

I have created a Role with the help of the following documentation in Kibana.
Links:
https://www.elastic.co/guide/en/kibana/7.3/role-management-api-put.html
https://www.elastic.co/guide/en/kibana/7.3/kibana-privileges.html

However, I am unable to assign this role to a user created with OpenID based realm. Is there any way to do this?
API used to create the developer role:
URL:
PUT {{kb_ip_port}}/api/security/role/developer_role

{
	"metadata": {
		"version": 1.0
	},
    "elasticsearch": {
        "cluster": [
            "monitor",
            "manage_index_templates",
            "manage_pipeline",
            "manage_ingest_pipelines",
            "transport_client",
            "manage_ml",
            "monitor_ml",
            "manage_data_frame_transforms",
            "monitor_data_frame_transforms",
            "manage_watcher",
            "monitor_watcher",
            "manage_ccr",
            "manage_ilm",
            "read_ilm",
            "manage_rollup",
            "monitor_rollup",
            "manage_saml",
            "manage_token",
            "create_snapshot",
            "manage_oidc",
            "read_ccr",
            "manage"
        ],
        "indices": [
            {
                "names": [
                    "*"
                ],
                "privileges": [
                    "all"
                ]
            }
        ]
    },
    "kibana": [
        {
            "base": [
                "all"
            ],
            "feature": {},
            "spaces": [
                "*"
            ]
        }
    ]
}
2

Hi there,

You can assign roles to the users that log in with OpenID Connect with role mapping based on various OpenID Connect claims

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.