# Kibana\_system user management

**URL:** <https://discuss.elastic.co/t/kibana-system-user-management/265793>\
**Category:** Kibana\
**Created:** [March 1, 2021, 12:07pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793 "2021-03-01T12:07:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dimm](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dimm](https://discuss.elastic.co/u/dimm)\
**Post date:** [March 1, 2021, 12:07pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793/1 "2021-03-01T12:07:41Z")

</div>

Hi,  
I'm faced with strange situation while trying to change password for reserved kibana\_system user:  
This is looks like vicious circle,  
when I'm trying to update password I'm getting: "roles are missing"  
when I'm trying to update password and roles I'm getting: "only the password can be changed"

```auto
     curl -u user -XPOST 'https://hostname:9200/_security/user/kibana_system' -H 'Content-Type: application/json' -d'
    {"password": "NEWPASSWORD", "roles": []}'

    {
    	"error": {
    		"root_cause": [
    			{
    				"type": "action_request_validation_exception",
    				"reason": "Validation Failed: 1: user [kibana_system] is reserved and only the password can be changed;"
    			}
    		],
    		"type": "action_request_validation_exception",
    		"reason": "Validation Failed: 1: user [kibana_system] is reserved and only the password can be changed;"
    	},
    	"status": 400
    }

    curl -u user -XPOST 'https://hostname:9200/_security/user/kibana_system' -H 'Content-Type: application/json' -d'
    {"password": "NEWPASSWORD"}'

    {
    	"error": {
    		"root_cause": [
    			{
    				"type": "action_request_validation_exception",
    				"reason": "Validation Failed: 1: roles are missing;"
    			}
    		],
    		"type": "action_request_validation_exception",
    		"reason": "Validation Failed: 1: roles are missing;"
    	},
    	"status": 400
    }

```

---

<div class="post-metadata">

**Author:** ![Wolfram\_Haussig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wolfram_haussig/32/70528_2.png) [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Post date:** [March 1, 2021, 12:18pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793/2 "2021-03-01T12:18:31Z")

</div>

Hi,

I think you are using the wrong API - you should use the [change password api](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-change-password.html):

```auto
curl -u user -XPOST 'https://hostname:9200/_security/user/kibana_system/_password' -H 'Content-Type: application/json' -d'
    {"password": "NEWPASSWORD"}'

```

Best regards  
Wolfram

---

<div class="post-metadata">

**Author:** ![dimm](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dimm](https://discuss.elastic.co/u/dimm)\
**Post date:** [March 1, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793/3 "2021-03-01T13:58:52Z")

</div>

Thank you! This is solution.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 29, 2021, 1:59pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793/4 "2021-03-29T13:59:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.