Setup readonly users

Security
1

i have AD Setup and the backend roles are showing currently for users.
All my regular users should only be able to query the logs in kibana. Basically no write/update on the indexes.
Which security roles should i be granting at cluster and index levels for a role i created for them ?

Thanks

2

@dsatya

Did you resolve your issue? What ODFE version do you run?

3

I am running version 12…

These index permissions for a new role I created, seems to be working for me. I did not extensive testing.

read

indices:data/read/search

indices:data/read/search*

indices:data/read/get

indices:data/read/mget*

indices:data/read/scroll