3488261 - Is there any detailed permission control on OpenSearch, besides admin_group in IAS?

Symptom

If configured admin_groups in SAML Configuration Parameters as described on the Help Portal Prerequisites | SAP Help Portal and logged in with a user that belongs to the IAS user group, OpenSearch allowed us to do configuration there. Conversely, when I logged in with a user that didn't let me belong to admin_group, OpenSearch didn't show anything when I pressed each menu, and almost nothing could be done.

If I use OpenSearch with IAS authentication, is it mandatory for the logged in user to belong to admin_group?
In other words, is there any detailed permission control on OpenSearch?

Environment

SAP Business Technology Platform - BTP
SAP Cloud Logging service - SAP CLS
SAP Cloud Identity Services - Identity Authentication

Product

BTP all versions

Keywords

OpenSearch, admin_group, all_access, role mappings, group, permission, OpenSearch Dashboards, top-right corner, View roles and identities , KBA , BC-CP-CLS , Storage & Analytics for Application Logs, Metrics, Traces , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.