When a scripted search fails due to lack of role permissions, is there some audit log to help you figure out which permissions you need?