# Migration to V8: kibana reporting-user depreciated

**URL:** <https://discuss.elastic.co/t/migration-to-v8-kibana-reporting-user-depreciated/378100>\
**Category:** Elasticsearch\
**Created:** [May 13, 2025, 9:03pm UTC](https://discuss.elastic.co/t/migration-to-v8-kibana-reporting-user-depreciated/378100 "2025-05-13T21:03:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Russell\_Fulton](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/russell_fulton/32/62888_2.png) [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Post date:** [May 13, 2025, 9:03pm UTC](https://discuss.elastic.co/t/migration-to-v8-kibana-reporting-user-depreciated/378100/1 "2025-05-13T21:03:47Z")

</div>

basic license on version 7.17...

I spent hours on this yesterday and failed to figure out how to use "kibana privileges" to allow reporting for users.

the screenshot in the documentation do not match what I see.

I restarted kibana with `xpack.reporting.roles.enabled: false`  
Verified that I was no longer able to download a csv file from discover.  
`roles > create > kibana > add kibana privilige`

 ![Screenshot 2025-05-14 at 8.50.14 AM](https://us1.discourse-cdn.com/elastic/original/3X/9/8/9800123d9c44e4f65f103be74b10d0c560b3b346.png)

this appear to only allow assigning privs to workspace which is not what I want. I need to be able to create a role that can be applied to users. Also there is no way I can see of adding a reporting function. Screen shots in docs show an expansion `>` for `discover` etc

Do I have to do this via the API?

edit: just found [Configure Kibana reporting | Elastic Docs](https://www.elastic.co/docs/deploy-manage/kibana-reporting-configuration#grant-user-access)

which suggests that, for basic license configuring in kibana you have to select "ALL", which means that you are also granting write access : (

I tried to create a user role via the api :

```auto
curl -u elastic --noproxy \* -X PUT https://secmgrprd04.its.auckland.ac.nz:5601/api/security/role/csv-download -d '
{
  "elasticsearch": {
    "cluster" : [],
    "indices" : []
  },
  "kibana": [
    {
      "base": [],
      "feature": {
        "visualize_v2": ["all"],
        "dashboard_v2": ["read", "url_create"]
      },
      "spaces": ["marketing"]
    }
  ]
}'

```

copied from the docs and got this response:  
`{"statusCode":400,"error":"Bad Request","message":"Request must contain a kbn-xsrf header."}`

How am I supposed to make such api requests?