# Assigning roles to allow watcher management **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [June 20, 2019, 1:59pm UTC](https://discuss.elastic.co/t/assigning-roles-to-allow-watcher-management/186701 "2019-06-20T13:59:13Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![nbelanger](https://avatars.discourse-cdn.com/v4/letter/n/91b2a8/32.png) [@nbelanger](https://discuss.elastic.co/u/nbelanger)\ **Post date:** [June 20, 2019, 1:59pm UTC](https://discuss.elastic.co/t/assigning-roles-to-allow-watcher-management/186701/1 "2019-06-20T13:59:13Z")
Having trouble assigning roles so that they can add/update a watcher. When the user logs in, and attempts to click on manage watcher link - they receive: "you do not have permission to manage watches" The role has the following cluster privs: monitor manage\_watcher monitor\_watcher No 'run as privs' as defined Index privs are for the indexes they need access to. Any suggestions on this issue? ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [June 21, 2019, 2:12am UTC](https://discuss.elastic.co/t/assigning-roles-to-allow-watcher-management/186701/2 "2019-06-21T02:12:54Z")
Can you use the [Authenticate API](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-authenticate.html) to double check the roles list for the user, and provide that output along with the role definition. If there's something amiss, we'll need to see actual API output to work it out. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 19, 2019, 2:12am UTC](https://discuss.elastic.co/t/assigning-roles-to-allow-watcher-management/186701/3 "2019-07-19T02:12:54Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.