Elasticsearch Role Permissions

[Saarbruecken]

I can't see the wood for the trees -- so please forgive me this (probably stupid) question:
Which role permissions must be used in Kibana so an user account and its assigned role does only have the permissions assigned to its dedicated index?

I can't find the information through Google, which probably means that I bark up the wrong tree. I have been searching the web for... now four hours.

What I have been doing so far:

• Installed Elasticsearch and Kibana according to Elasticsearch knowledge base articles.
• Certificates are in place and things are already working properly when using the elastic admin account.
• HTTPS/TLS is working properly as well + I have valid certificates in place.
• I created an index, an user and a role and I assigned the user to that role. But which index permissions do I have to assign?

I just want to make sure, the user can only write to the assigned index and want to avoid entering the admin password for Elasticsearch in Xenforo. Thanks guys!