# Create new user

**URL:** https://discuss.elastic.co/t/create-new-user/122362
**Category:** Elasticsearch
**Created:** [March 3, 2018, 9:38am UTC](https://discuss.elastic.co/t/create-new-user/122362 "2018-03-03T09:38:54Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![shahpx](https://avatars.discourse-cdn.com/v4/letter/s/54ee81/32.png) [@shahpx](https://discuss.elastic.co/u/shahpx)
#### Post date: [March 3, 2018, 9:38am UTC](https://discuss.elastic.co/t/create-new-user/122362/1 "2018-03-03T09:38:54Z")

</div>

Hello,

I have installed ELK stack with x-pack.  
Now I logged in with Kibana user and trying to create new user but it is throwing error:  
You do not have permission to manage users.  
Please contact your administrator.

Anyone pls help me how to create new user using Kibana interface.

---

<div class="post-metadata">

### Author: ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)
#### Post date: [March 4, 2018, 12:49am UTC](https://discuss.elastic.co/t/create-new-user/122362/2 "2018-03-04T00:49:15Z")

</div>

Hello,

You need to login with Elastic user/password to be able to create new users. Kibana user is just used for connecting and communicating with ES.

> kibana  
> The user Kibana uses to connect and communicate with Elasticsearch.

Here are our docs: [Setting Up User Authentication | X-Pack for the Elastic Stack [6.2] | Elastic](https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html)

Thanks,  
Bhavya

---

<div class="post-metadata">

### Author: ![shahpx](https://avatars.discourse-cdn.com/v4/letter/s/54ee81/32.png) [@shahpx](https://discuss.elastic.co/u/shahpx)
#### Post date: [March 4, 2018, 12:05pm UTC](https://discuss.elastic.co/t/create-new-user/122362/3 "2018-03-04T12:05:10Z")

</div>

Hi,

I tried login with elastic user in kibana but not able to log in. The password generated using x-pack utility for elastic user.  
Pls help.

Regards,  
Parag

---

<div class="post-metadata">

### Author: ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)
#### Post date: [March 4, 2018, 11:12pm UTC](https://discuss.elastic.co/t/create-new-user/122362/4 "2018-03-04T23:12:59Z")

</div>

Hi,

3 things:

1. Can you try to login to elastic cluster with your password which you generated?
2. Can you please add your elastic user/password into Kibana.yml? and then try to login to Kibana using your elastic user?
3. If all that fails can you please try to create your password for elastic/Kibana/logstash using step 7 here?

[https://www.elastic.co/guide/en/elasticsearch/reference/6.2/installing-xpack-es.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.2/installing-xpack-es.html)

Thanks,  
Bhavya

---

<div class="post-metadata">

### Author: ![shahpx](https://avatars.discourse-cdn.com/v4/letter/s/54ee81/32.png) [@shahpx](https://discuss.elastic.co/u/shahpx)
#### Post date: [March 5, 2018, 10:16pm UTC](https://discuss.elastic.co/t/create-new-user/122362/5 "2018-03-05T22:16:13Z")

</div>

Hi Thank you for your prompt response.  
Below points you suggested :

1. Can you try to login to elastic cluster with your password which you generated?  
[]: Yes I generated password after installing xpack and used elastic password to launch and access elastic url
2. Can you please add your elastic user/password into Kibana.yml? and then try to login to Kibana using your elastic user?  
[]: Yes added the elastic password in Kibana.yml so after that only i was able to access Kibana UI. I access kibana UI with Kibana user and password that was generated earlier. So till this point i don't have any issue.

so after step 2 i.e. launching kibana with kibana user when im trying to access user management then it is throwing error that cannot access it because of insufficient privileges.  
so read article saying that i need to access kibana with elastic super user which has privilege to create new user with role but that's is where my concern that which elastic super user? Is it the same which has been used to access elastic ? if so then i tried with that user as well but not able to launch kibana.

Pls suggest

Thanks,  
Parag

---

<div class="post-metadata">

### Author: ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [March 6, 2018, 12:04am UTC](https://discuss.elastic.co/t/create-new-user/122362/6 "2018-03-06T00:04:54Z")

</div>

> [@shahpx](#):
>
> I access kibana UI with Kibana user and password that was generated earlier.

You should not do this. It's a common mistake that new users make, but this is not the correct user for logging into Kibana.

The _kibana_ user is designed as a user that the Kibana application can use for its own purposes when it connects to Elasticsearch. Typically this is the user that you enter into your `kibana.yml` file.  
For example, it is how Kibana can tell whether your ES server is available, and whether it has security turned on. You should not log in to Kibana as that user, because it doesn't have permission to do very much (which is intentional - it has just enough access to run Kibana but no more)

You should initially login to Kibana using the `elastic` user. This is a _superuser_ that can do everything.  
You _can_ use that user for everything you want to do, and always login to Kibana as _elastic_, but we don't recommend it. Because that user can do everything, it can make a horrible mess of your cluster if you're not careful, and one of the benefits of X-Pack security is that it can protect you from mistakes like that.

Rather, we recommend that you use the `elastic` user to login the first time, and then use the Kibana admin screens to create new, lower privileged users and roles that have just the permissions that you need, but nothing more. You can then safely use those users to do your work in Kibana, and you can always login as `elastic` if you need to make major changes.

---

<div class="post-metadata">

### Author: ![shahpx](https://avatars.discourse-cdn.com/v4/letter/s/54ee81/32.png) [@shahpx](https://discuss.elastic.co/u/shahpx)
#### Post date: [March 6, 2018, 6:49pm UTC](https://discuss.elastic.co/t/create-new-user/122362/7 "2018-03-06T18:49:58Z")

</div>

Thank you very much for your response.  
As you mentioned I tried login with elastic user but not able login with that user somehow.  
Could you pls help me to troubleshoot the issue.

Thanks  
Parag

---

<div class="post-metadata">

### Author: ![shahpx](https://avatars.discourse-cdn.com/v4/letter/s/54ee81/32.png) [@shahpx](https://discuss.elastic.co/u/shahpx)
#### Post date: [March 7, 2018, 6:56pm UTC](https://discuss.elastic.co/t/create-new-user/122362/8 "2018-03-07T18:56:45Z")

</div>

It is working now...  
Thank you all for your support.

---

<div class="post-metadata">

### Author: ![Unknown\_error](https://avatars.discourse-cdn.com/v4/letter/u/df705f/32.png) [@Unknown\_error](https://discuss.elastic.co/u/Unknown_error)
#### Post date: [April 3, 2018, 2:49am UTC](https://discuss.elastic.co/t/create-new-user/122362/9 "2018-04-03T02:49:46Z")

</div>

elastic is an administrator account, thank.

---

<div class="post-metadata">

### Author: ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [April 3, 2018, 4:34am UTC](https://discuss.elastic.co/t/create-new-user/122362/10 "2018-04-03T04:34:41Z")

</div>

@Unknown_error

I'm not sure if you have a question, or need assistance with something, but if so, please start a new thread to discuss your issue.  
Thanks.

---

<div class="post-metadata">

### Author: ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [April 3, 2018, 4:34am UTC](https://discuss.elastic.co/t/create-new-user/122362/11 "2018-04-03T04:34:47Z")

</div>


