Kibana 7.9 keystore permissions error

I have installed a fresh kibana on CentOS 7 via yum (rpm) and when I'm trying to add entity to a keystore, I get an error:

/usr/share/kibana/bin/kibana-keystore add server.ssl.keyPassphrase
Enter value for server.ssl.keyPassphrase:
Babel could not write cache to file: /usr/share/kibana/optimize/.babel_register_cache.json due to a permission issue. Cache is disabled.
Enter value for server.ssl.keyPassphrase: ********
FATAL CLI ERROR Error: EACCES: permission denied, open '/usr/share/kibana/config/kibana.keystore'
at Object.openSync (fs.js:443:3)
at writeFileSync (fs.js:1194:35)
at (/usr/share/kibana/src/legacy/server/keystore/keystore.js:65:27)
at add (/usr/share/kibana/src/cli_keystore/add.js:73:12)
at process._tickCallback (internal/process/next_tick.js:68:7)

Same error, when I'm trying to delete and create store.

Which exact permissions must be on a keystore?

Now it's:
-rw-r--r--. 1 root root 130 Sep 7 21:57 /usr/share/kibana/config/kibana.keystore

UPDATE1: I added entity as sudo with --allow-root, kibana must be supposed to read the value. If that's all, topic must be closed.