# \[Elastic Stack 7.1\] Built-In user authentication **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [August 7, 2019, 5:05am UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141 "2019-08-07T05:05:44Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Scorpion21](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/scorpion21/32/48483_2.png) [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Post date:** [August 7, 2019, 5:05am UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141/1 "2019-08-07T05:05:44Z")
Hi There, I am going through this tutorial to learn security features [https://www.elastic.co/guide/en/elastic-stack-overview/7.1/security-getting-started.html](https://www.elastic.co/guide/en/elastic-stack-overview/7.1/security-getting-started.html) The first couple of steps are working fine and I am able to add built-in user "kibana" into kibana.yml elasticsearch.username: "kibana" elasticsearch.password: "\*\*\*\*\*\*\*" However, when I re-start kibana and try log back in as "Kibana", there is still an error message pop up saying {"statusCode":403,"error":"Forbidden","message":"Forbidden"} Can anyone please advise what is wrong here? ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [August 7, 2019, 6:35am UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141/2 "2019-08-07T06:35:45Z")
`kibana` is a system user that Kibana uses to connect to elasticsearh and should not be used by end users logging in through Kibana. Use the `elastic` user to log in via Kibana for now and in one of the [following steps of the guide](https://www.elastic.co/guide/en/elastic-stack-overview/7.1/get-started-users.html) you'll see how to create users that you can use to authenticate from then on. ---
**Author:** ![Scorpion21](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/scorpion21/32/48483_2.png) [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Post date:** [August 7, 2019, 6:47am UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141/3 "2019-08-07T06:47:35Z")
Thanks mate, yes I am able to login as elastic and create users with chosen roles. ---
**Author:** ![varunakuraju](https://avatars.discourse-cdn.com/v4/letter/v/c57346/32.png) [@varunakuraju](https://discuss.elastic.co/u/varunakuraju)\ **Post date:** [August 14, 2019, 5:43pm UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141/4 "2019-08-14T17:43:33Z")
Hi, I got the same error message when i am trying to login to the kibana ({"statusCode":403,"error":"Forbidden","message":"Forbidden"}) after entering the credentials. I have followed "steps of guide" that you mentioned but kibana is not opened yet Thanks ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [August 14, 2019, 6:04pm UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141/5 "2019-08-14T18:04:06Z")
Please don't hijack threads, but open your own. Also please help us to help you. You need to provide details about what you have done exactly , the exact error message , the logs from elasticsearch and kibana. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 11, 2019, 6:04pm UTC](https://discuss.elastic.co/t/elastic-stack-7-1-built-in-user-authentication/194141/6 "2019-09-11T18:04:07Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.