How to assing permission to generate CSV in Terraform

Elastic Orchestration terraform
1

Hello everyone, I use Elastic Cloud. I have created the following role in terraform.

resource "elasticstack_elasticsearch_security_role" "users_analyst" {
  name    = "users-analyst"
  cluster = ["monitor_watcher"]

  indices {
    allow_restricted_indices = false
    names                    = ["logs-*", "metrics-*"]
    privileges               = ["read"]
    query = jsonencode(
      {
        "bool" : {
          "should" : [
            { "match_phrase" : { "data_stream.namespace" : "stage" } },
            { "match_phrase" : { "data_stream.namespace" : "production" } },
            { "match_phrase" : { "data_stream.namespace" : "development" } }
          ]
        }
      }
    )
    field_security {
      except = []
      grant  = ["*"]
    }
  }

  applications {
    application = "kibana"
    privileges  = ["read"]
    resources   = ["*"]
  }

  applications {
    application = "kibana-.kibana"
    privileges = [
      "feature_canvas.all",
      "feature_dashboard.all",
      "feature_discover.all",
      "feature_graph.all",
      "feature_maps.all",
      "feature_visualize.all"
    ]
    resources = ["*"]
  }

}

For security I need that users can only generate a CSV report from the option "Shared" > "CSV Reports" is possible?

When I try to do so I see this error message

Unable to create report

Error
    at fetch_Fetch.fetchResponse (https://x.kb.vpce.us-east-1.aws.elastic-cloud.com/66491/bundles/core/core.entry.js:1:290551)
    at async https://x.kb.vpce.us-east-1.aws.elastic-cloud.com/66491/bundles/core/core.entry.js:1:288484
    at async https://x.kb.vpce.us-east-1.aws.elastic-cloud.com/66491/bundles/core/core.entry.js:1:288441

Thanks for the help.

2

Removed #elastic-cloud