# Right role to access https://$ES\_HOST/\_stats
**URL:** https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872
**Category:** Elasticsearch
**Created:** [June 5, 2020, 12:58am UTC](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872 "2020-06-05T00:58:25Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)
#### Post date: [June 5, 2020, 12:58am UTC](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872/1 "2020-06-05T00:58:25Z")
I have created a role with Cluster Privileges monitor and monitor\_watcher and attached to user. Using the user creds I get the below error:
```auto
Error, sdchecks[499898] Exception on running check elasticsearch: HTTPError('403 Client Error: Forbidden for url: https://$ES_HOST:9200/_stats')
2020-06-05 00:46:16.131, 499895.499907, Error, sdchecks[499898] requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://$ES_HOST:9200/_stats
```
What would be the right permissions on role?
---
### Author:  [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)
#### Post date: [June 10, 2020, 6:06pm UTC](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872/2 "2020-06-10T18:06:52Z")
Fixed issue by adding monitor permission to \* indices to role.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 8, 2020, 6:06pm UTC](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872/3 "2020-07-08T18:06:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.