In addition also set CLUSTER.OPERATOR if there are any operator roles defined in Ambari. Or else Cluster operators will not be able to login to Logsearch. This is how I set it up.
AMBARI.ADMINISTRATOR, CLUSTER.ADMINISTRATOR, CLUSTER.OPERATOR, CLUSTER.USER