Kibana 7.16.2 - permissions for Stack Management

Search Guard
1

Elasticsearch version:
7.16.2

Kibana version (if relevant):
7.16.2

Describe the issue:
After Updating to Kibana 7.16.2 with SG 52.2.0 plugin, we no longer have “Stack Management” available in the menu.

We have added the following:
cluster_permissions:

  • “monitor”
  • “manage_index_templates”
  • “manage”
  • “SGS_CLUSTER_MANAGE_INDEX_TEMPLATES”
  • “SGS_CLUSTER_ALL”

index_permissions:

  • index_patterns:
    • “*”
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
    • “view_index_metadata”
    • “manage”

Provide configuration:
I have these roles:
kibana-settings-admins
kibana-admins

elasticsearch/plugins/search-guard-7/sgconfig/sg_config.yml
roles_mapping:

index_management:
  reserved: false
  hidden: false
  backend_roles:
  - "kibana-settings-admins"
  - "kibana-admins"
  hosts: []
  users:
  - "admin"
  and_backend_roles: []
  description: "beginning v7.16.2"```

sg_roles:

index_management:
reserved: true
hidden: false
description: “beginning 7.16.2”
cluster_permissions:

  • “monitor”
  • “manage_index_templates”
  • “manage”
  • “SGS_CLUSTER_MANAGE_INDEX_TEMPLATES”
  • “SGS_CLUSTER_ALL”
    index_permissions:
  • index_patterns:
    • “*”
      dls: null
      fls: null
      masked_fields: null
      allowed_actions:
    • “view_index_metadata”
    • “manage”
      tenant_permissions:
      static: false

**Screenshots (if relevant):**
![image|162x500](upload://31XmHGA443ptXsFrJPMtgbVcgTC.png)
2

@tonyphillips-charter
Could you take the backup of the current configuration and share sg_config.yml, roles.yml and roles_mapping.yml files.

If you don’t want to share it in the thread, then DM me.

3

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.