About user authentication: action [indices:data/read/search] is unauthorized for user

[Chu_Jun]

Hi,
I used kibana -> management -> (security) user to created an user 'test' with role 'kibana_user',
but I won't able to see any index and perform GET indexname/_search for all the index when I logged in as user test.

It gave me an error:
{
"error": {
"root_cause": [
{
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [test]"
}
],
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [test]"
},
"status": 403
}

[TimV (Tim Vernum)]

Granting the kibana_user role doesn't provide access to any underlying data.

Per the documentation

You also need to grant Kibana users access to the indices that they will be working with in Kibana.

[Chu_Jun]

Thank you. I will try it now.

[Chu_Jun]

Hi VimV, may I check with you that is it a must to use SSL ( Install server certificate) for kibana in order to perform user authentication?

BlockquoteTo prevent user passwords from being sent in the clear, you must configure Kibana to encrypt communications between the browser and the Kibana server. If are encrypting traffic to and from the nodes in your Elasticsearch cluster, you must also configure Kibana to connect to Elasticsearch via HTTPS.