# Dashboard with few visualizations created with restricted indices return error

**URL:** https://discuss.elastic.co/t/dashboard-with-few-visualizations-created-with-restricted-indices-return-error/38744
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [January 8, 2016, 3:58pm UTC](https://discuss.elastic.co/t/dashboard-with-few-visualizations-created-with-restricted-indices-return-error/38744 "2016-01-08T15:58:26Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![rbommineni](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@rbommineni](https://discuss.elastic.co/u/rbommineni)
#### Post date: [January 8, 2016, 3:58pm UTC](https://discuss.elastic.co/t/dashboard-with-few-visualizations-created-with-restricted-indices-return-error/38744/1 "2016-01-08T15:58:26Z")

</div>

I have a dashboard with few visualizations created from restricted indices and few visualizations created from non restricted indices. Kibana instead of blocking just the restricted visualizations empties the whole dashboard and returns this error:  
Visualize: [security\_exception] action [indices:data/read/msearch] is unauthorized for user []

role I am using,  
kibanauser:  
indices:  
non-restricted index:  
- indices:admin/mappings/fields/get  
- indices:admin/validate/query  
- indices:data/read/search  
- indices:data/read/msearch  
- indices:admin/get

```
'.kibana':
  - indices:admin/exists
  - indices:admin/mappings/fields/get
  - indices:admin/refresh
  - indices:admin/validate/query
  - indices:data/read/get
  - indices:data/read/mget
  - indices:data/read/search
```

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 10, 2016, 12:56am UTC](https://discuss.elastic.co/t/dashboard-with-few-visualizations-created-with-restricted-indices-return-error/38744/2 "2016-01-10T00:56:04Z")

</div>

I'll move this to the Shield area as it's more applicable.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:47pm UTC](https://discuss.elastic.co/t/dashboard-with-few-visualizations-created-with-restricted-indices-return-error/38744/3 "2017-07-06T13:47:18Z")

</div>