# 403: forbidden error when trying to log in using 'kibana' buitin user

**URL:** <https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [January 6, 2020, 4:55pm UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922 "2020-01-06T16:55:54Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![elk11](https://avatars.discourse-cdn.com/v4/letter/e/45deac/32.png) [@elk11](https://discuss.elastic.co/u/elk11)\
**Post date:** [January 6, 2020, 4:55pm UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922/1 "2020-01-06T16:55:55Z")

</div>

Hi,

Kibana and Elasticsearch version: 7.3.1

I can login to kibana using 'elastic' buitin user but trying to login to kibana using 'kibana' buitin creds gives 403:

`{"statusCode":403,"error":"Forbidden","message":"Forbidden"}`

nothing in elasticsearch logs and the same 403 error in kibana logs.

Is it that 'kibana' buitin user cannot be used to login to kibana?

Thanks!

---

<div class="post-metadata">

**Author:** ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)\
**Post date:** [January 6, 2020, 5:24pm UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922/2 "2020-01-06T17:24:28Z")

</div>

Did you set the password for the kibana user? Instructions are here: [https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html)

---

<div class="post-metadata">

**Author:** ![elk11](https://avatars.discourse-cdn.com/v4/letter/e/45deac/32.png) [@elk11](https://discuss.elastic.co/u/elk11)\
**Post date:** [January 7, 2020, 6:13am UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922/3 "2020-01-07T06:13:27Z")

</div>

Yes. I did that. And i have same credentials in kibana config file (which is working fine).

I have set that password through API.

Why can't i use those creds to login to Kibana UI?

---

<div class="post-metadata">

**Author:** ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)\
**Post date:** [January 7, 2020, 5:14pm UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922/4 "2020-01-07T17:14:48Z")

</div>

Based on your description I'm surprised there is an issue. It seems like it would be be worth trying to change the password again. The docs describe some of the limitations of built-in users here: [https://www.elastic.co/guide/en/elasticsearch/reference/current/built-in-users.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/built-in-users.html)

Also, does your built-in Kibana user have the right privileges? When I run `GET _security/user/kibana` I get:

```auto
{
  "kibana" : {
    "username" : "kibana",
    "roles" : [
      "kibana_user",
      "kibana_system",
      "transport_client"
    ],
    "full_name" : "",
    "email" : "",
    "metadata" : { },
    "enabled" : true
  }
}

```

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [January 8, 2020, 6:48am UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922/5 "2020-01-08T06:48:01Z")

</div>

> [@elk11](#):
>
> Is it that 'kibana' buitin user cannot be used to login to kibana?

Yes, that is exactly the case.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 5, 2020, 6:48am UTC](https://discuss.elastic.co/t/403-forbidden-error-when-trying-to-log-in-using-kibana-buitin-user/213922/6 "2020-02-05T06:48:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.