Wazuh API error: ERR_BAD_REQUEST - Permission denied: Resource type: *:*

[Syah]

Dear WAZUH Team,

I am experiencing an issue with creating internal users. I created a user, for example, "nesiaadmin" with an Admin role. However, when I log in with that user, I encounter the error "Wazuh API Error: ERR_BAD_REQUEST - Permission denied: Resource type: :".

The second issue is that with the "admin" user, I am unable to save rule/decoder configurations via the WAZUH UI Dashboard. So, when there is a configuration change, I have to "SSH" directly into the machine where the WAZUH server is located.

How can I resolve these issues?

Thank you for attention

[Himanshu Sharma]

Hi Team,

Wazuh RBAC allows access to Wazuh resources based on the roles and policies assigned to the users. It is an easy-to-use administration system that enables to manage users' or entities' permissions to the system resources. 

If you want to create a user with administrator permissions then you can follow the below official guide.

https://documentation.wazuh.com/current/user-manual/user-administration/rbac.html#creating-and-setting-a-wazuh-admin-user

It seems you have not provided all the permissions mentioned in point 5 of the above document. Can you please share the steps you have followed so I can review them?

Regards,

[Syah]

Hi Himanshu,

I successfully created an admin account for Wazuh by following the steps outlined in "Creating and setting a Wazuh admin user." The previous error "Wazuh API Error: ERR_BAD_REQUEST - Permission denied: Resource type: :" has been resolved. However, I'm still encountering an issue where I'm unable to save the Decoders/Rules configuration through the Wazuh Dashboard, despite having administrator privileges on my account.

[Syah]

Hi Himanshu, 

i solved this problem. Thank you