# Getting a 403 error when performing a get operation

**URL:** <https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325>\
**Category:** Elasticsearch\
**Created:** [September 23, 2016, 3:12am UTC](https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325 "2016-09-23T03:12:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![thinkabout](https://avatars.discourse-cdn.com/v4/letter/t/51bf81/32.png) [@thinkabout](https://discuss.elastic.co/u/thinkabout)\
**Post date:** [September 23, 2016, 3:12am UTC](https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325/1 "2016-09-23T03:12:52Z")

</div>

Hi, we're evaluating ElasticSearch and Kibana. I have recently downloaded elasticsearch-5.0.0-alpha5 and kibana-5.0.0-alpha5-windows-86.

When performing a get operation authenticating with the default username\pwd, I get the following error

{"error":{"root\_cause":[{"type":"security\_exception","reason":"action [indices:admin/get] is unauthorized for user [kibana]"}],"type":"security\_exception","reason":"action [indices:admin/get] is unauthorized for user [kibana]"},"status":403}

I can also login to Kibana using the default username\pwd, however, this login does not have permissions to manage users\roles.

Could someone offer some advice or direct me towards some documentation which would explain why this is happening?

---

<div class="post-metadata">

**Author:** ![danielmitterdorfer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/danielmitterdorfer/32/110510_2.png) [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\
**Post date:** [September 23, 2016, 5:53am UTC](https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325/2 "2016-09-23T05:53:20Z")

</div>

Hi @thinkabout,

the "kibana" user does not have these privileges by intention. However, there is a second user "elastic" which you can use for this purpose.

See also [X-Pack Security: Getting Started](https://www.elastic.co/guide/en/x-pack/5.0/security-getting-started.html) in the docs.

Daniel

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:17pm UTC](https://discuss.elastic.co/t/getting-a-403-error-when-performing-a-get-operation/61325/3 "2017-07-05T22:17:55Z")

</div>