Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ML] File Data Viz: indicate the required privileges on UI and our docs for the "import" feature #47516

Closed
wwang500 opened this issue Oct 7, 2019 · 4 comments · Fixed by #50147
Assignees
Labels
enhancement New value added to drive a business result Feature:File and Index Data Viz ML file and index data visualizer :ml v7.6.0

Comments

@wwang500
Copy link

wwang500 commented Oct 7, 2019

Kibana Version: 7.4.0

Step to reproduce:

  1. Create a user with only kibana_user and machine_learning_user roles
  2. Login as the user
  3. navigate to Machine Learning -> Data Visualizer
  4. select a csv file to import

Observed:
the "Import" button is greyed out.

snapshot:
image

Expected behavior:
Either the "Import" button should be enabled, or we should indicate the required privileges on UI and our docs

For now, the user needs to have a custom role with manage_ingest_pipelines, monitor and manage_index_templates for cluster privileges, and manage and index privileges for target index.

@wwang500 wwang500 added enhancement New value added to drive a business result Feature:File and Index Data Viz ML file and index data visualizer v7.4.0 labels Oct 7, 2019
@wwang500 wwang500 changed the title [ML] File Data Viz: indicate the required privileges on UI and our docs for the "import" button [ML] File Data Viz: indicate the required privileges on UI and our docs for the "import" feature Oct 7, 2019
@elasticmachine
Copy link
Contributor

Pinging @elastic/ml-ui (:ml)

@peteharverson
Copy link
Contributor

I suggest if the user doesn't have the required permissions to import data, then we add a tooltip to the disabled button saying something like 'You do not have the privileges required to import data' , and possibly then list the exact privileges that are required:

Current checks in the code are for:

cluster:monitor/nodes/info
cluster:admin/ingest/pipeline/put

and if index name is known, the following privileges on the index (probably not applicable for this step of the wizard):

'indices:data/write/bulk',
'indices:data/write/index',
 'indices:admin/create',

Would also be useful to add a page to the docs listing the prerequisites.

@peteharverson
Copy link
Contributor

Note in testing this, I found that I didn't need to have manage_index_templates. I used a custom role with manage_ingest_pipelines and monitor for cluster privileges, and manage and index privileges for target index (plus read to be able to view the ingested data once the import is complete).

@droberts195
Copy link
Contributor

Note in testing this, I found that I didn't need to have manage_index_templates

That makes sense to me. As far as I'm aware the file import feature doesn't create an index template.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New value added to drive a business result Feature:File and Index Data Viz ML file and index data visualizer :ml v7.6.0
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants