# Reporting not working with shield, getting indices:data/read/mget error is unauthorised for user

**URL:** <https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252>\
**Category:** Kibana\
**Tags:** elastic-stack-reporting\
**Created:** [September 22, 2016, 12:30pm UTC](https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252 "2016-09-22T12:30:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![upendra](https://avatars.discourse-cdn.com/v4/letter/u/e68b1a/32.png) [@upendra](https://discuss.elastic.co/u/upendra)\
**Post date:** [September 22, 2016, 12:30pm UTC](https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252/1 "2016-09-22T12:30:04Z")

</div>

I am trying to run reporting with shield but when I try to do this, I get the following error in Kibana (4.6.1) and ES (2.4.0) with latest reporting plugin.

FInd the error image below.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/a/a50fadcef06eee07b5ff596be0d36a65532ac443.PNG)

The roles.yml file is as follows :-

# All cluster rights

# All operations on all indices

admin:  
cluster:  
- all  
indices:  
- names: '\*'  
privileges:  
- all

# monitoring cluster privileges

# All operations on all indices

power\_user:  
cluster:  
- monitor  
indices:  
- names: '\*'  
privileges:  
- all

# Read-only operations on indices

user:  
indices:  
- names: '\*'  
privileges:  
- read

# Defines the required permissions for transport clients

transport\_client:  
cluster:  
- transport\_client

# The required permissions for the kibana 4 server

kibana4\_server:  
cluster:  
- monitor  
indices:  
- names: '.kibana\*'  
privileges:  
- all  
- names: '.reporting-\*'  
privileges:  
- all

# The required role for kibana 4 users

kibana4:  
cluster:  
- cluster:monitor/nodes/info  
- cluster:monitor/health  
indices:  
'.reporting-_':  
- indices:admin/create  
- indices:admin/exists  
- indices:admin/mapping/put  
- indices:admin/mappings/fields/get  
- indices:admin/refresh  
- indices:admin/validate/query  
- indices:data/read/get  
- indices:data/read/mget  
- indices:data/read/search  
- indices:data/read/msearch  
- indices:data/write/delete  
- indices:data/write/index  
- indices:data/write/update  
'_':  
- indices:admin/mappings/fields/get  
- indices:admin/validate/query  
- indices:data/read/search  
- indices:data/read/msearch  
- indices:admin/get  
- indices:data/read/field\_stats  
'.kibana':  
- indices:admin/create  
- indices:admin/exists  
- indices:admin/mapping/put  
- indices:admin/mappings/fields/get  
- indices:admin/refresh  
- indices:admin/validate/query  
- indices:data/read/get  
- indices:data/read/mget  
- indices:data/read/search  
- indices:data/write/delete  
- indices:data/write/index  
- indices:data/write/update  
- indices:data/read/msearch

# temp can only access the .kibana index

ironman:  
cluster:  
- cluster:monitor/nodes/info  
- cluster:monitor/health  
indices:  
'\*':  
- indices:admin/mappings/fields/get  
- indices:admin/validate/query  
- indices:data/read/search  
- indices:data/read/msearch  
- indices:admin/get  
- indices:data/read/mget

# The required role for logstash users

logstash:  
cluster:  
- manage\_index\_templates  
indices:  
- names: 'logstash-\*'  
privileges:  
- write  
- read  
- create\_index

# Marvel user role. Assign to marvel users.

marvel\_user:  
indices:  
- names: '.marvel-es-\*'  
privileges: ["read"]  
- names: '.kibana'  
privileges:  
- view\_index\_metadata  
- read

# Marvel remote agent role. Assign to the agent user on the remote marvel cluster

# to which the marvel agent will export all its data

remote\_marvel\_agent:  
cluster: ["manage\_index\_templates"]  
indices:  
- names: '.marvel-es-\*'  
privileges: ["all"]

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [October 10, 2016, 7:54pm UTC](https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252/2 "2016-10-10T19:54:20Z")

</div>

Hi Upendra,

What user are you logged into Kibana as? And what role(s) does that user have?

And does it work OK with the admin user?

Thanks,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:43pm UTC](https://discuss.elastic.co/t/reporting-not-working-with-shield-getting-indices-data-read-mget-error-is-unauthorised-for-user/61252/3 "2017-07-06T13:43:07Z")

</div>