Permissions problem with tenants in ELK 6.8.6

Search Guard
1

I have Elasticsearch 6.8.6 and the relevant plugins for Search Guard running. I have created tenants and assigned permissions. I used the following as the guide to configure the setup:

Here are the relevant snippets.

#sg_roles.yml

smiu:
  indices:
    '*':
      '*':
        - indices:data/read/get
        - indices:data/read/search
    't?uk*':
      '*':
        - READ
    't?sm*':
      '*':
        - READ
    'collectusers':
      '*':
        - READ
  tenants:
    smiu: RW

#sg_roles_mapping.yml

smiu:
  backendroles:
    - smiu

Any account that has the admin role works:

nealr:
  roles:
    - admin
    - smiu

Any account that just has the sg_kibana_user permission and its tenant does not have access.

smiudemo:
  roles:
    - sg_kibana_user
    - smiu

I think I am having the same problem as described here, but I carefully read through it, checked my files, and the solution in there doesn’t fix my problem.

I have enough users now that I don’t want to give them all admin … what is the solution to this?

2

Do you have any error in the Kibana or Elasticsearch logs? Please provide the logs.

3

Also, we need the following config files:

  • elasticsearch/config/elasticsearch.yml
  • elasticsearch/plugins/search-guard-7/sgconfig/sg_config.yml
  • kibana/config/kibana.yml
4

Here are the requested files from our system.

SG.zip (6.1 KB)