# How to set up a role level security with oidc

**URL:** <https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580>\
**Category:** Kibana\
**Tags:** elastic-stack-security, windows\
**Created:** [August 26, 2021, 1:42pm UTC](https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580 "2021-08-26T13:42:32Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![SRIGURU\_VEL](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sriguru_vel/32/88656_2.png) [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Post date:** [August 26, 2021, 1:42pm UTC](https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580/1 "2021-08-26T13:42:32Z")

</div>

HI Experts,  
I have configured and Integrated Elasticsearch and Keycloak via Xpack. Previously I used Searchguard Instead of Xpack. In that We used role level security and it was working fine till now. But in Xpack I dont know how to work like that. I will Share my Searchguard Queries

```auto
PUT _searchguard/api/roles/SGS_addressnumber
{
"index_permissions": [
{
"index_patterns": [
"indexname"
],
"dls": """{"terms" : { "attribute1.svalue" : [${user.roles}]}}"""
}
]
}

 

PUT _searchguard/api/rolesmapping/SGS_addressnumber
{
"backend_roles" : [
"addressnumber"
]
}

 

PUT _searchguard/api/rolesmapping/SGS_ALL_ACCESS
{
"backend_roles" : [
"admin",
"addressnumber"
]
}

```

We Post these queries and Add a addressnumber and addressnumber value like(1001) in client role in keycloak and it should fetch that exact value .

My question is "How to Post a query in xpack like this? and how to set keycloak client role as a condition to search?"

---

<div class="post-metadata">

**Author:** ![alisongoryachev](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alisongoryachev/32/111352_2.png) [@alisongoryachev](https://discuss.elastic.co/u/alisongoryachev)\
**Post date:** [August 26, 2021, 2:23pm UTC](https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580/2 "2021-08-26T14:23:00Z")

</div>

Hi @SRIGURU_VEL!

I would recommend taking a look at our documentation for configuring [Elasticsearch for OIDC](https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-guide.html#oidc-elasticsearch-authentication). If you have any follow-up questions, would you mind asking in the [Elasticsearch Discuss forum](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6)?

---

<div class="post-metadata">

**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\
**Post date:** [August 30, 2021, 12:33am UTC](https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580/3 "2021-08-30T00:33:28Z")

</div>

It seems that you are after some combination of [Document Level Security](https://www.elastic.co/guide/en/elasticsearch/reference/current/document-level-security.html) and [role query template](https://www.elastic.co/guide/en/elasticsearch/reference/current/field-and-document-access-control.html#templating-role-query)?

---

<div class="post-metadata">

**Author:** ![SRIGURU\_VEL](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sriguru_vel/32/88656_2.png) [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Post date:** [August 31, 2021, 9:35am UTC](https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580/4 "2021-08-31T09:35:03Z")

</div>

hi @Yang_Wang ,

thanks for the response. yes I need a query to filter data from an index and that filter condition should me assigned via keycloak.  
till now I didnot found exact solution.

thanks,  
Sriguruvel.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 28, 2021, 9:35am UTC](https://discuss.elastic.co/t/how-to-set-up-a-role-level-security-with-oidc/282580/5 "2021-09-28T09:35:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.