# Action \[indices:admin/create\] is unauthorized for user \[kibana\]

**URL:** https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958
**Category:** Elasticsearch
**Created:** [June 7, 2018, 10:41am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958 "2018-06-07T10:41:19Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![RakshaChoudhary](https://avatars.discourse-cdn.com/v4/letter/r/8e8cbc/32.png) [@RakshaChoudhary](https://discuss.elastic.co/u/RakshaChoudhary)
#### Post date: [June 7, 2018, 10:41am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958/1 "2018-06-07T10:41:20Z")

</div>

Hi,

I am new to ElasticSearch and Kibana. Installed elasticsearch and Kibana at my laptop. Installed xpack also.  
I ran elasticsearch and kibana batch. And the trying to run below line in Dev Tools of Kibana.

PUT /schools?pretty

When running this, I am getting below error.

{  
"error": {  
"root\_cause": [  
{  
"type": "security\_exception",  
"reason": "action [indices:admin/create] is unauthorized for user [kibana]"  
}  
],  
"type": "security\_exception",  
"reason": "action [indices:admin/create] is unauthorized for user [kibana]"  
},  
"status": 403  
}

Please help me. Yesterday it was working fine. I dont have any idea what change I made , so that it stopped working.

Thanks in advance all.  
RC

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [June 7, 2018, 10:58am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958/2 "2018-06-07T10:58:00Z")

</div>

The `kibana` system user is for Kibana to connect to Elasticsearch, and basically only gives access to the `.kibana` index and some cluster level privileges. You should not use this as a user of Kibana. Instead you should create a separate user that is given the `kibana_user`role as well as roles that grant access to the actual data the user need to be able to access.

---

<div class="post-metadata">

### Author: ![RakshaChoudhary](https://avatars.discourse-cdn.com/v4/letter/r/8e8cbc/32.png) [@RakshaChoudhary](https://discuss.elastic.co/u/RakshaChoudhary)
#### Post date: [June 7, 2018, 12:48pm UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958/3 "2018-06-07T12:48:36Z")

</div>

> [@Christian\_Dahlqvist](#):
>
> ld create a separate user that is given the `kibana_user` role as well as roles that grant access to the actual data the user need to be able to access.

Thanks Christian for the reply.  
In one another thread, I got to know that I should not login with Kibana username. But now I am struggling to login with elasticsearch login. I dont know where to change and how to login using elasticsearch username.  
Should I modify kibana.yml file?

---

<div class="post-metadata">

### Author: ![RakshaChoudhary](https://avatars.discourse-cdn.com/v4/letter/r/8e8cbc/32.png) [@RakshaChoudhary](https://discuss.elastic.co/u/RakshaChoudhary)
#### Post date: [June 7, 2018, 1:14pm UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958/4 "2018-06-07T13:14:39Z")

</div>

hey thanks Christian,

After deleting cache, it asked me for password. So now its working fine. 🙂

Thanks a lot for your help.

Regards,  
RC

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2018, 1:14pm UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958/5 "2018-07-05T13:14:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.