How to manage the permission of indices

You need to create a role for each of the different sets of permissions you want.
In your case it looks like you need 4 roles.

Then you use role mapping to assign different roles based on the SAML attributes.
Haven't we already discussed this?