Failed to parse indices privileges for role . requires if is given – How to solve this Elasticsearch error

Opster Team

July-20, Version: 1.7-8.0

Before you begin reading this guide, we recommend you try running the Elasticsearch Check-Up which can resolve issues that cause many errors.

This guide will help you check for common problems that cause the log ” failed to parse indices privileges for role . requires if is given ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: indices and plugin.

Advanced users might want to skip right to the common problems section in each concept or try running the Check-Up to analyze Elasticsearch configuration and help resolve this error.

Log Context

Log “failed to parse indices privileges for role [{}]. {} requires {} if {} is given”classname  is RoleDescriptor.java We extracted the following from Elasticsearch source code for those seeking an in-depth context :

if (privileges == null) {
 throw new ElasticsearchParseException("failed to parse indices privileges for role [{}]. missing required [{}] field";
 roleName; Fields.PRIVILEGES.getPreferredName());
 }
 if (deniedFields != null && grantedFields == null) {
 throw new ElasticsearchParseException("failed to parse indices privileges for role [{}]. {} requires {} if {} is given";
 roleName; Fields.FIELD_PERMISSIONS; Fields.GRANT_FIELDS; Fields.EXCEPT_FIELDS);
 }
 checkIfExceptFieldsIsSubsetOfGrantedFields(roleName; grantedFields; deniedFields);
 return RoleDescriptor.IndicesPrivileges.builder()
 .indices(names)

 

Watch product tour

Watch how AutoOps finds & fixes Elasticsearch problems

Analyze Your Cluster
Skip to content