diff --git a/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java b/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java
index 6fa9d400ae..d4e6fe4e9e 100644
--- a/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java
+++ b/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java
@@ -124,7 +124,7 @@ public class OpensearchConfigurationProvider implements Provider<OpensearchConfi
                     localConfiguration.getOpensearchTransportPort(),
                     localConfiguration.getClustername(),
                     localConfiguration.getDatanodeNodeName(),
-                    localConfiguration.getNodeRoles() ,
+                    localConfiguration.getNodeRoles(),
                     localConfiguration.getOpensearchDiscoverySeedHosts(),
                     securityConfiguration,
                     s3RepositoryConfiguration,
@@ -146,23 +146,26 @@ public class OpensearchConfigurationProvider implements Provider<OpensearchConfi
         config.put("network.bind_host", localConfiguration.getBindAddress());
 
         // https://opensearch.org/docs/latest/tuning-your-cluster/availability-and-recovery/snapshots/snapshot-restore/#shared-file-system
-        if(localConfiguration.getPathRepo() != null && !localConfiguration.getPathRepo().isEmpty()) {
+        if (localConfiguration.getPathRepo() != null && !localConfiguration.getPathRepo().isEmpty()) {
             config.put("path.repo", String.join(",", localConfiguration.getPathRepo()));
         }
 
         //config.put("network.publish_host", Tools.getLocalCanonicalHostname());
 
-        if(localConfiguration.getOpensearchDebug() != null && !localConfiguration.getOpensearchDebug().isBlank()) {
+        if (localConfiguration.getOpensearchDebug() != null && !localConfiguration.getOpensearchDebug().isBlank()) {
             config.put("logger.org.opensearch", localConfiguration.getOpensearchDebug());
         }
 
-        if(localConfiguration.getOpensearchAuditLog() != null && !localConfiguration.getOpensearchAuditLog().isBlank()) {
+        if (localConfiguration.getOpensearchAuditLog() != null && !localConfiguration.getOpensearchAuditLog().isBlank()) {
             config.put("plugins.security.audit.type", localConfiguration.getOpensearchAuditLog());
         }
 
         // common OpenSearch config parameters from our docs
         config.put("indices.query.bool.max_clause_count", localConfiguration.getIndicesQueryBoolMaxClauseCount().toString());
 
+        // enable admin access via the REST API
+        config.put("plugins.security.restapi.admin.enabled", "true");
+
         return config.build();
     }