Is it possible to grant _system user more permissions?

Elastic Stack Elasticsearch
1

Hello,
We have a plugin running in 6.4.3 that uses the node client to make a series of calls to the Elasticsearch API. When security is enabled I see the error:
org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/exists] is unauthorized for user [_system]

I have tried adding to role_mapping the following:
superuser:
- _system

However the client still cannot call index exists. Is it possible to change who the client runs as in a plugin or add permissions to the _system user?

2

I also tried to add a mapping to solve this

"mapping1": {
"enabled": true,
"roles": [
"superuser"
],
"rules": {
"field": {
"username": "_system"
}
},
"metadata": {}
}

but I still get the error

3

It seems I can query the health of the index and get back a map of index names to health status. If the index name is not in the map then index does not exist. Since the _system user has permission to query health status of an index but now query if it exists I am wondering if there is a list of what permissions the _system user has.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.