# Courier Fetch Error: unhandled courier request error: \[security\_exception\] action \[indices:data/read/mget\] is unauthorized for user \[ganesh\]
**URL:** https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [January 13, 2016, 9:53am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080 "2016-01-13T09:53:30Z")
**Posts on this page:** 13
**Page:** 1
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [January 13, 2016, 9:53am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/1 "2016-01-13T09:53:30Z")
Hi ,
I'm very new to shield process. I have created my admin login and work fine . I'm trying to add one user with logstash role. when i login in kibana its through this error " Courier Fetch Error: unhandled courier request error: [security\_exception] action [indices:data/read/mget] is unauthorized for user [ganesh] ". I'm using elasticsearch 2.1.1 and kibana 1.4.3 version
I have checked my user account property also it is bonded with respective role only by use this command shield\>esusers roles ganesh.
This is my logstash role detail:
logstash:
cluster: indices:admin/template/get, indices:admin/template/put
indices:
'logstash-\*':
privileges: indices:data/write/bulk, indices:data/write/delete, indices:data/write/update, indices:data/read/search, indices:data/read/scroll, create\_index
Can any one help me to resolve this issue.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 13, 2016, 10:35am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/2 "2016-01-13T10:35:11Z")
> [@Ganesh2303](#):
>
> indices:data/read/mget
You need to add that privilege, as the error states.
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [January 13, 2016, 10:39am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/3 "2016-01-13T10:39:12Z")
Hi Warkolam,
I have add that in privilege even though i'm getting same error.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 13, 2016, 10:39am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/4 "2016-01-13T10:39:58Z")
Can you post the current, correct config?
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [January 13, 2016, 10:40am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/5 "2016-01-13T10:40:41Z")
Config mean roles.yml file?
logstash:
cluster: indices:admin/template/get, indices:admin/template/put
indices:
'logstash-\*':
privileges: indices:data/write/bulk, indices:data/write/delete, indices:data/read/mget, indices:data/write/update, indices:data/read/search, indices:data/read/scroll, create\_index
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [January 13, 2016, 11:00am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/6 "2016-01-13T11:00:12Z")
Anything i have to define in my roles\_mapping.yml and logstash.config?
---
### Author:  [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [January 13, 2016, 11:29am UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/7 "2016-01-13T11:29:52Z")
You have provided the logstash role, but that is not sufficient for a Kibana user. See the `kibana4_monitoring` role on this [page](https://www.elastic.co/guide/en/shield/current/kibana.html#using-kibana4-with-shield).
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [January 13, 2016, 12:36pm UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/8 "2016-01-13T12:36:14Z")
Hi jaymode,
Thank you.Now its working but i want to show my dashborad alone, rest of the i want to diasble how can i perform that?
---
### Author:  [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [January 13, 2016, 1:35pm UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/9 "2016-01-13T13:35:08Z")
I want to make sure I understand your question correctly, you only want the user to be able to view the dashboard? They should not be allowed to do anything else in Kibana including editing that dashboard?
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [January 13, 2016, 1:36pm UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/10 "2016-01-13T13:36:41Z")
Yes, your are right and also I fixed that scenario. Thank you so much for your quick reply.
---
### Author:  [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [January 13, 2016, 1:40pm UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/11 "2016-01-13T13:40:27Z")
I do not believe this is possible today with Kibana. We have had requests for this feature in Kibana and are looking at how we can implement it in a future version.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 13, 2016, 9:15pm UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/12 "2016-01-13T21:15:54Z")
Jay is correct, you cannot currently do that in KB.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:47pm UTC](https://discuss.elastic.co/t/courier-fetch-error-unhandled-courier-request-error-security-exception-action-indices-data-read-mget-is-unauthorized-for-user-ganesh/39080/13 "2017-07-06T13:47:15Z")