About user authentication: action [indices:data/read/search] is unauthorized for user

(Chu Jun) #1

I used kibana -> management -> (security) user to created an user 'test' with role 'kibana_user',
but I won't able to see any index and perform GET indexname/_search for all the index when I logged in as user test.

It gave me an error:
"error": {
"root_cause": [
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [test]"
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [test]"
"status": 403

(Tim Vernum) #2

Granting the kibana_user role doesn't provide access to any underlying data.

Per the documentation

You also need to grant Kibana users access to the indices that they will be working with in Kibana.

(Chu Jun) #3

Thank you. I will try it now.

(Chu Jun) #4

Hi VimV, may I check with you that is it a must to use SSL ( Install server certificate) for kibana in order to perform user authentication?

BlockquoteTo prevent user passwords from being sent in the clear, you must configure Kibana to encrypt communications between the browser and the Kibana server. If are encrypting traffic to and from the nodes in your Elasticsearch cluster, you must also configure Kibana to connect to Elasticsearch via HTTPS.

(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.