# Kibana4\_server role error

**URL:** <https://discuss.elastic.co/t/kibana4-server-role-error/59077>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [August 26, 2016, 8:44pm UTC](https://discuss.elastic.co/t/kibana4-server-role-error/59077 "2016-08-26T20:44:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![piyush](https://avatars.discourse-cdn.com/v4/letter/p/ecb155/32.png) [@piyush](https://discuss.elastic.co/u/piyush)\
**Post date:** [August 26, 2016, 8:44pm UTC](https://discuss.elastic.co/t/kibana4-server-role-error/59077/1 "2016-08-26T20:44:56Z")

</div>

Hi Team,  
I mapped my AD user with default role i.e. kibana4\_server, which i picked up from default roles.yml file. But i am getting below error on Kibana console:

As privileges are set to all, i am not sure why it's not working, please suggest.

====================  
Kibana Error:  
[security\_exception] action [cluster:monitor/nodes/info] is unauthorized for user [test1]

=====================  
roles\_mapping.yml:  
kibana4\_server:

- "cn=gp-ops-es-admin,ou=ccs,dc=ad,dc=----,dc=----,dc=com"

===================

roles.yml:

# The required permissions for the kibana 4 server

kibana4\_server:  
cluster:  
- monitor  
indices:  
- names: '.kibana'  
privileges:  
- all

Thanks & Regards

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [August 29, 2016, 11:04am UTC](https://discuss.elastic.co/t/kibana4-server-role-error/59077/2 "2016-08-29T11:04:01Z")

</div>

HI @piyush,

I was looking at the log message you provided in the previous topic and it seems like the group you are mapping with is not being retrieved from Active Directory. Do you see a log message like:

the roles [], are mapped from these [] groups [] for realm []

---

<div class="post-metadata">

**Author:** ![piyush](https://avatars.discourse-cdn.com/v4/letter/p/ecb155/32.png) [@piyush](https://discuss.elastic.co/u/piyush)\
**Post date:** [August 29, 2016, 7:36pm UTC](https://discuss.elastic.co/t/kibana4-server-role-error/59077/3 "2016-08-29T19:36:38Z")

</div>

Yes, it was due to CN issue.  
It got resolved, Thanks Jai...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/kibana4-server-role-error/59077/4 "2017-07-06T13:42:10Z")

</div>