Exclude Role from Access to Multiple Indices

Thank you. I’m also submitting a feature request for this.

That is correct. A deny list is easier to manage than an allow list, unless you’re only going to be allowing a very few things.

Thanks again!

Update

Here is my feature request for this item.