Создание пользователя через API

Пример создания пользователя через API или Dev Tools

Сделать hash пароля

export PASSWORD="123456"
python3 -c 'import os, bcrypt; print(bcrypt.hashpw(os.getenv("PASSWORD").encode("utf-8"), bcrypt.gensalt(12, prefix=b"2a")).decode("utf-8"))'

PUT _plugins/_security/api/internalusers/<USERNAME>
{
    "hash": "$2a$12$CEOwhE73014M9LO6h5OD9.cxylD.bc.H4Dl.Qq9nMcuAAg7upinzq",
    "backend_roles": [],
    "attributes": {
      "description": "test user"
    },
    "opendistro_security_roles": []
}

Роль определяет права пользователя

PUT _plugins/_security/api/roles/<ROLENAME>
{
    "cluster_permissions": [
      "cluster:monitor/main"
    ],
    "index_permissions": [
      {
        "index_patterns": [
          "*"
        ],
        "allowed_actions": [
          "create_index",
          "read",
          "write",
          "indices:admin/settings/update"
        ]
      }
    ],
    "tenant_permissions": []
}

Назначить пользователю роль

PUT _plugins/_security/api/rolesmapping/<ROLENAME>
{
    "hosts": [],
    "users": [
      "<USERNAME>"
    ],
    "backend_roles": [],
    "and_backend_roles": []
}