# Kibana status is Red - security\_exception **URL:** \ **Category:** Elastic Cloud Enterprise (ECE)\ **Tags:** elastic-stack-security\ **Created:** [January 29, 2020, 2:33pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021 "2020-01-29T14:33:58Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Henrique\_Mauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henrique_mauri/32/61647_2.png) [@Henrique\_Mauri](https://discuss.elastic.co/u/Henrique_Mauri)\ **Post date:** [January 29, 2020, 2:33pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/1 "2020-01-29T14:33:58Z")
Hello I'm having trouble opening my Kibana, the error is displayed: plugin: security@7.1.1 - [security\_exception] action [cluster: admin / xpack / security / privilege / delete] is unauthorized for user [found-internal-kibana4-server] How to solve this error? ![Capturar](https://us1.discourse-cdn.com/elastic/original/3X/5/5/5575e036518137cf753102b8f534e2c1eeac9b2b.jpeg) ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [January 29, 2020, 3:31pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/2 "2020-01-29T15:31:05Z")
> [@Henrique\_Mauri](#): > > y@7.1.1 - [security\_exception] action [cluster: admin / xpack / security / privilege / delete] is unauthorized for user [found-internal-kibana4-server] This means that the logged in user doesn't have the right set of privileges. When and where do you see that error? In Kibana? When you log in? Or in a log file? To Just use Kibana and have access to the data in an index, a user would typically only require; 1. `kibana_user` 2. a role with `read` and `view_index_metadata` privs on that particular index (and no cluster privs) You could turn on audit logging in your Elasticsearch cluster and that would show you what user it is getting the error and what index they are accessing. [https://www.elastic.co/guide/en/x-pack/current/auditing.html](https://www.elastic.co/guide/en/x-pack/current/auditing.html) You could also query Elasticsearch for your users and roles and paste it here so we could check that you really have everything set correctly. curl -XGET [http://localhost:9200/\_xpack/security/role?pretty](http://localhost:9200/_xpack/security/role?pretty) curl -XGET [http://localhost:9200/\_xpack/security/user?pretty](http://localhost:9200/_xpack/security/user?pretty) Please let us know if that helps. Regards, Rashmi ---
**Author:** ![Henrique\_Mauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henrique_mauri/32/61647_2.png) [@Henrique\_Mauri](https://discuss.elastic.co/u/Henrique_Mauri)\ **Post date:** [January 29, 2020, 4:15pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/3 "2020-01-29T16:15:28Z")
hi Rashmi This error appears as soon as I log in to Kibana, making any action impossible, as shown in the image below! I've created new users with the roles superuser and kibana\_user but the error persists! [Capturar|546x500](https://discuss.elastic.co/uploads/short-url/lHRl13eUdRhKNyaWqT2vh0yxwXq.jpeg) ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [January 29, 2020, 4:56pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/4 "2020-01-29T16:56:23Z")
Can we have supporting Kibana logs and ES logs as well when this happens ? what version of the stack are u on ? Thanks Rashmi ---
**Author:** ![Henrique\_Mauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henrique_mauri/32/61647_2.png) [@Henrique\_Mauri](https://discuss.elastic.co/u/Henrique_Mauri)\ **Post date:** [January 29, 2020, 5:52pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/5 "2020-01-29T17:52:29Z")
Hi Rashmi I'm sorry, but how do I get the logs? We use Elastic at "[https://cloud.elastic.co](https://cloud.elastic.co)" and I only have these menus ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/d/ed08a2ef9fb637db1fd335c9756217e7d10d8f53.png) ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [January 29, 2020, 6:01pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/6 "2020-01-29T18:01:38Z")
There seems to be something wrong with the kibana user created - which is unable to talk to ES. . Pinging cloud here : @imkarrer Thanks Rashmi ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [January 29, 2020, 6:58pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/7 "2020-01-29T18:58:12Z")
Hi Since this is a cloud issue, will you please open a support ticket , so that more eyes can get to it ? I have moved this question to Cloud Discuss. Thanks Rashmi ---
**Author:** ![Henrique\_Mauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henrique_mauri/32/61647_2.png) [@Henrique\_Mauri](https://discuss.elastic.co/u/Henrique_Mauri)\ **Post date:** [January 29, 2020, 7:15pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/8 "2020-01-29T19:15:08Z")
Ok Rashmi I already opened a ticket with this case. Thank you very much for your attention and support Thanks Henrique ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [January 29, 2020, 7:18pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/9 "2020-01-29T19:18:46Z")
Thanks ...hope it gets resolved soon. Rashmi ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 26, 2020, 7:18pm UTC](https://discuss.elastic.co/t/kibana-status-is-red-security-exception/217021/10 "2020-02-26T19:18:54Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.