# Cannot change kibana user roles also cannot create new user

**URL:** <https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706>\
**Category:** Kibana\
**Created:** [August 3, 2017, 11:46am UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706 "2017-08-03T11:46:10Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Swaroop\_Chandre](https://avatars.discourse-cdn.com/v4/letter/s/ecc23a/32.png) [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\
**Post date:** [August 3, 2017, 11:46am UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706/1 "2017-08-03T11:46:11Z")

</div>

New to ELK.

 ![security_exception](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3fd12d62983bf0f295150278fba717a3097190c9.png)

Also I cannot simulate my grok pattern due to security\_exception.

[roles|690x387](https://discuss.elastic.co/uploads/short-url/hSW1qSyRiaGzWeOXaeFpTB2K1PB.png)  
Cannot change kibana user roles also cannot create new user with admin like roles.!

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [August 3, 2017, 2:50pm UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706/2 "2017-08-03T14:50:53Z")

</div>

@Swaroop_Chandre the `kibana` user is what the Kibana server runs as and uses to authenticate itself with Elasticsearch, it's not meant for you to be logging in with.

You'll likely want to use the `elastic` built-in superuser to create a new user that has the `kibana_user` and `ingest_admin` roles.

---

<div class="post-metadata">

**Author:** ![Swaroop\_Chandre](https://avatars.discourse-cdn.com/v4/letter/s/ecc23a/32.png) [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\
**Post date:** [August 4, 2017, 9:54am UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706/3 "2017-08-04T09:54:41Z")

</div>

@Brandon_Kobel but how do I proceed from here? As kibana user is not privileged to add or create user. Which are other default user so that I can create new user and manage roles with admin like rights.

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [August 4, 2017, 1:58pm UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706/4 "2017-08-04T13:58:16Z")

</div>

> You’ll likely want to use the `elastic` built-in superuser to create a new user that has the kibana\_user and ingest\_admin roles.

---

<div class="post-metadata">

**Author:** ![Swaroop\_Chandre](https://avatars.discourse-cdn.com/v4/letter/s/ecc23a/32.png) [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\
**Post date:** [August 18, 2017, 6:23am UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706/5 "2017-08-18T06:23:54Z")

</div>

Thank you @Brandon_Kobel . This did resolve.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 15, 2017, 6:24am UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706/6 "2017-09-15T06:24:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.