# Permission issue

**URL:** https://discuss.elastic.co/t/permission-issue/123921
**Category:** Elasticsearch
**Created:** [March 14, 2018, 2:25pm UTC](https://discuss.elastic.co/t/permission-issue/123921 "2018-03-14T14:25:13Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Padmapriya](https://avatars.discourse-cdn.com/v4/letter/p/df788c/32.png) [@Padmapriya](https://discuss.elastic.co/u/Padmapriya)
#### Post date: [March 14, 2018, 2:25pm UTC](https://discuss.elastic.co/t/permission-issue/123921/1 "2018-03-14T14:25:13Z")

</div>

Hi ,  
I am learning kibana and xpack. I have installed free version of ES,kibana and xpack and also done the security settings like username and password.  
Now am facing permission issues in kibana. Before installing xpack i am able to POST my code in dev tools. Once i install xpack i am getting permission issue.  
I try to set user role but failed to set.

When i am trying to manage roles or add new watch i am getting below error message.

(You do not have permission to manage watches.  
Please contact your administrator.)

I can't Post anything by using dev tools. Below is the error i am getting when i try to POST or GET.

{  
"error": {  
"root\_cause": [  
{  
"type": "security\_exception",  
"reason": "action [indices:admin/mappings/get] is unauthorized for user [kibana]"  
}  
],  
"type": "security\_exception",  
"reason": "action [indices:admin/mappings/get] is unauthorized for user [kibana]"  
},  
"status": 403  
}

Please help me to resolve this permission issue.

---

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [March 14, 2018, 2:45pm UTC](https://discuss.elastic.co/t/permission-issue/123921/2 "2018-03-14T14:45:43Z")

</div>

Hello,

It looks like you have logged in to Kibana using the `kibana` user, which is a common mistake, but albeit a mistake. `kibana` user is an internal user that you configure in your `kibana.yml` file and that Kibana uses to connect to Elasticsearch and is not meant to be used by end users.

You can start by logging in to Kibana with the `elastic` superuser. It can do pretty much anything, so you can either keep on using this user or - and this is what we suggest - create new, specific users that have permissions to do as little as possible in order to satisfy your use cases and use those in order to access Kibana.

---

<div class="post-metadata">

### Author: ![Padmapriya](https://avatars.discourse-cdn.com/v4/letter/p/df788c/32.png) [@Padmapriya](https://discuss.elastic.co/u/Padmapriya)
#### Post date: [March 15, 2018, 9:23am UTC](https://discuss.elastic.co/t/permission-issue/123921/3 "2018-03-15T09:23:16Z")

</div>

Thank you it works.

When i try to install xpack in my work PC.  
Its throwing the below error. Any idea about this??

D:\ElasticSearch\elasticsearch-6.2.2\bin\>elasticsearch-plugin install file://D:\Xpack\x-pack-6.2.2.zip  
-\> Downloading file://D:\Xpack\x-pack-6.2.2.zip  
Exception in thread "main" java.net.UnknownHostException: D  
at java.net.AbstractPlainSocketImpl.connect(Unknown Source)  
at java.net.PlainSocketImpl.connect(Unknown Source)  
at java.net.Socket.connect(Unknown Source)  
at java.net.Socket.connect(Unknown Source)  
at sun.net.ftp.impl.FtpClient.doConnect(Unknown Source)  
at sun.net.ftp.impl.FtpClient.tryConnect(Unknown Source)  
at sun.net.ftp.impl.FtpClient.connect(Unknown Source)  
at sun.net.ftp.impl.FtpClient.connect(Unknown Source)  
at sun.net.www.protocol.ftp.FtpURLConnection.connect(Unknown Source)  
at sun.net.www.protocol.ftp.FtpURLConnection.getInputStream(Unknown Source)  
at org.elasticsearch.plugins.InstallPluginCommand.downloadZip(InstallPluginCommand.java:334)  
at org.elasticsearch.plugins.InstallPluginCommand.download(InstallPluginCommand.java:253)  
at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:221)  
at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:212)  
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)  
at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:75)  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)  
at org.elasticsearch.cli.Command.main(Command.java:90)  
at org.elasticsearch.plugins.PluginCli.main(PluginCli.java:48)

---

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [March 15, 2018, 1:46pm UTC](https://discuss.elastic.co/t/permission-issue/123921/4 "2018-03-15T13:46:49Z")

</div>

`elasticsearch-plugin install file:///D:/Xpack/x-pack-6.2.2.zip` should be the correct command to run

---

<div class="post-metadata">

### Author: ![Padmapriya](https://avatars.discourse-cdn.com/v4/letter/p/df788c/32.png) [@Padmapriya](https://discuss.elastic.co/u/Padmapriya)
#### Post date: [March 15, 2018, 2:49pm UTC](https://discuss.elastic.co/t/permission-issue/123921/5 "2018-03-15T14:49:46Z")

</div>

Thank you so much:slight\_smile:

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 12, 2018, 2:51pm UTC](https://discuss.elastic.co/t/permission-issue/123921/6 "2018-04-12T14:51:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
