# Not authorized to use Reporting
**URL:** https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631
**Category:** Kibana
**Tags:** elastic-stack-reporting
**Created:** [September 15, 2016, 4:09pm UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631 "2016-09-15T16:09:38Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@Kaabo](https://discuss.elastic.co/u/Kaabo)
#### Post date: [September 15, 2016, 4:09pm UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631/1 "2016-09-15T16:09:38Z")
Hi,
I am trying to use Reporting -plugin with Shield on my Win10. My versions are:
Elasticsearch: 2.4.0
Kibana: 4.6.1
Reporting: 2.4.1
After multiple attempts I still get the error:
“Reporting: Error 403 Forbidden: Sorry, you are not authorized to use Reporting”
I have installed a valid license for product validation purposes issued by Elastic.
Here are my roles:
my\_kibana\_user:
cluster:
- monitor
indices:
- names: '_'
privileges:
- view\_index\_metadata
- read
- names: '.kibana_'
privileges:
- manage
- read
- index
And
reporting\_user:
indices:
- names: '.reporting-\*'
privileges:
- read
- write
I am assigning the roles with sense:
POST /\_shield/user/kibana\_user1
{
"password" : "very\_secret",
"roles" : ["my\_kibana\_user","reporting\_user"]
}
Any idea what the problem could be?
Best,
Kai
---
### Author:  [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)
#### Post date: [September 16, 2016, 9:18pm UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631/2 "2016-09-16T21:18:25Z")
I don't believe that Shield has the REST API in 2.4. What response do you get from the server when you run that?
As far as I know, you have to use `./bin/shield/esusers` to add and modify users. Like so:
`./bin/shield/esusers useradd kibana_user1 -r my_kibana_user,reporting_user -p very_secret`
I believe you can do that while Elasticsearch is running, and no restart is required, but I could be wrong about that.
---
### Author:  [@Kaabo](https://discuss.elastic.co/u/Kaabo)
#### Post date: [September 19, 2016, 10:19am UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631/3 "2016-09-19T10:19:34Z")
Running that POST command I get a response:
{
"user": {
"created": true
}
}
Then checking my shield users with:
GET \_shield/user
I get a response including the new user with the needed roles:
"kibana\_user1": {
"username": "kibana\_user1",
"roles": [
"my\_kibana\_user",
"reporting\_user"
],
"full\_name": null,
"email": null,
"metadata": {}
}
Those roles I pasted above are from roles.yml and work just fine with Kibana and Sense, but not with Reporting.
---
### Author:  [@bwgriffith](https://discuss.elastic.co/u/bwgriffith)
#### Post date: [September 28, 2016, 2:16pm UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631/4 "2016-09-28T14:16:04Z")
I had a similar issue. Was able to solve it by editing my roles.yml to:
```
kibana4_server:
cluster:
- cluster:monitor/nodes/info
- cluster:monitor/health
- cluster:monitor/plugin/license/get
indices:
'.kibana':
privileges: indices:admin/create, indices:admin/exists, indices:admin/mapping/put, indices:admin/mappings/fields/get, indices:admin/refresh, indices:admin/validate/query, indices:data/read/get, indices:data/read/mget, indices:data/read/search, indices:data/write/delete, indices:data/write/index, indices:data/write/update
'.reporting-*':
privileges: all
```
Hope this helps.
---
### Author:  [@Kaabo](https://discuss.elastic.co/u/Kaabo)
#### Post date: [September 29, 2016, 10:07am UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631/5 "2016-09-29T10:07:49Z")
Thanks! This helped me one step forward. Now I get the error:
There was an error generating your report for the "Reporting test printable" dashboard: Error: URL open failed. Is the server running?
Just noticed that there is a topic on that area already.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:43pm UTC](https://discuss.elastic.co/t/not-authorized-to-use-reporting/60631/6 "2017-07-06T13:43:08Z")