[BUG] When changing user backend role, get an error that there are no matching fields.

[10000-ki]

What is the bug?

https://opensearch.org/docs/latest/security/access-control/api/#patch-user

I want to change the backend role of a specific user by following the guide above. but it doesn't work well

GET _plugins/_security/api/internalusers/

{
  "testadmin": {
    "hash": "",
    "reserved": true,
    "hidden": false,
    "backend_roles": [],
    "attributes": {},
    "description": "Maps admin user 'osfarm_admin' custom role",
    "opendistro_security_roles": [
      "osfarm_admin",
      "internal_index_manager",
      "security_rest_api_full_access"
    ],
    "static": false
  },
  "kibanaserver": {
    "hash": "",
    "reserved": true,
    "hidden": false,
    "backend_roles": [],
    "attributes": {},
    "description": "Demo OpenSearch Dashboards user",
    "opendistro_security_roles": [],
    "static": false
  }
}

PATCH User

/_plugins/_security/api/internalusers/testadmin

[
  {
    "op": "replace", "path": "/backend_roles", "value": ["admin"]
  }
]

Error Occured

What is your host/environment?

all

[10000-ki]

Should the operation be add if there is no existing value?

[willyborankin]

I can confirm that the issue exists faced with the same problem for other configuration entities. I will assign it to me.

[scrawfor99]

[Triage] Hi @10000-ki thanks for filing this issue. Looks like @willyborankin is already taking a look. I will go ahead and mark this as triaged.