# Not able to Generate report

**URL:** <https://discuss.elastic.co/t/not-able-to-generate-report/61599>\
**Category:** Kibana\
**Tags:** elastic-stack-reporting\
**Created:** [September 27, 2016, 11:21am UTC](https://discuss.elastic.co/t/not-able-to-generate-report/61599 "2016-09-27T11:21:13Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![upendra](https://avatars.discourse-cdn.com/v4/letter/u/e68b1a/32.png) [@upendra](https://discuss.elastic.co/u/upendra)\
**Post date:** [September 27, 2016, 11:21am UTC](https://discuss.elastic.co/t/not-able-to-generate-report/61599/1 "2016-09-27T11:21:13Z")

</div>

Hi,

I have installed Shield on production cluster. When I try to generate report by clicking on Printable PDF, I get the following error :-

"Reporting: Error 403 Forbidden: Cannot determine license type because authorization failed"

I have specified Reporting privileges in my roles.yml as well. I am not getting where I am going wrong.

Thanks,

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [October 10, 2016, 7:47pm UTC](https://discuss.elastic.co/t/not-able-to-generate-report/61599/2 "2016-10-10T19:47:44Z")

</div>

Hi Upendra,

Have you resolved your problem? Can you tell us what version of Kibana you're on?

And what license type you have in production. You can check with something like this;  
[http://localhost:9200/\_license](http://localhost:9200/_license) (changing your host and port).

Any errors in your Kibana or Elasticsearch log?

Thanks,  
Lee

---

<div class="post-metadata">

**Author:** ![Yasho](https://avatars.discourse-cdn.com/v4/letter/y/c2a13f/32.png) [@Yasho](https://discuss.elastic.co/u/Yasho)\
**Post date:** [November 17, 2016, 8:00am UTC](https://discuss.elastic.co/t/not-able-to-generate-report/61599/3 "2016-11-17T08:00:28Z")

</div>

Hi Lee/Upendra,

I too am facing the same isse, i am using ES 2.4.1, Kibana 4.6.3 with Shield.

Here is the esusers list -  
xxxxxx\_user1: xxxxxx,kibana  
yyyyyy\_user1: yyyyyyy,kibana  
zzzzzz\_user1: zzzzzzz,kibana  
kibana\_admin : reporting\_user,kibana  
report\_master : reporting\_user,kibana  
es\_admin : reporting\_user,admin,kibana

the Roles file

kibana:  
cluster:  
- cluster:monitor/nodes/info  
- cluster:monitor/health  
indices:  
'.kibana,kibana-test,kibana-local':  
- indices:admin/exists  
- indices:admin/mapping/put  
- indices:admin/mappings/fields/get  
- indices:admin/refresh  
- indices:admin/validate/query  
- indices:data/read/get  
- indices:data/read/mget  
- indices:data/read/search  
- indices:data/read/msearch  
- indices:data/write/delete  
- indices:data/write/index  
- indices:data/write/update  
- indices:admin/create

#Reporting  
reporting\_user:  
indices:  
- names: '.reporting-\*'  
privileges:  
- write  
- read  
- create\_index

---

<div class="post-metadata">

**Author:** ![Yasho](https://avatars.discourse-cdn.com/v4/letter/y/c2a13f/32.png) [@Yasho](https://discuss.elastic.co/u/Yasho)\
**Post date:** [November 17, 2016, 9:46am UTC](https://discuss.elastic.co/t/not-able-to-generate-report/61599/4 "2016-11-17T09:46:15Z")

</div>

Hi Got the fix after a bit of searching in the forum, below is the config that worked for me..

kibana4\_server:  
cluster:  
- cluster:monitor/nodes/info  
- cluster:monitor/health  
- cluster:monitor/plugin/license/get  
indices:  
'.kibana':  
privileges: indices:admin/create, indices:admin/exists, indices:admin/mapping/put, indices:admin/mappings/fields/get, indices:admin/refresh, indices:admin/validate/query, indices:data/read/get, indices:data/read/mget, indices:data/read/search, indices:data/write/delete, indices:data/write/index, indices:data/write/update  
'.reporting-\*':  
privileges: all

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/not-able-to-generate-report/61599/5 "2017-07-06T13:42:52Z")

</div>