Hello,
We have 3 ES clusters 7.1 running in a remote-cluster setup. All works well, except generating reports from Kibana on a remote index e.g. *:remoteindex-*. The user has the kibana_user and reporting_user roles, trying to generate a report returns:
"statusCode":403,"response":"{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\"reason\":\"action [cluster:monitor/state] is unauthorized for user [some_user]\"}],\"type\":\"security_exception\",\"reason\":\"action [cluster:monitor/state] is unauthorized for user [some_user]\"},\"status\":403}"}
I couldn't find a monitor/state built-in role. Generating reports for local indices works fine.