Action indices:data/read/mget is unauthorized but privilege listed

but .kibana is the name of the index? this is copied from the default kibana4 role.

anyway, didn't work.