# Security Exception **URL:** \ **Category:** Elasticsearch\ **Created:** [March 18, 2024, 8:18am UTC](https://discuss.elastic.co/t/security-exception/355581 "2024-03-18T08:18:31Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Ganesh\_DV1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_dv1/32/127025_2.png) [@Ganesh\_DV1](https://discuss.elastic.co/u/Ganesh_DV1)\ **Post date:** [March 18, 2024, 8:18am UTC](https://discuss.elastic.co/t/security-exception/355581/1 "2024-03-18T08:18:31Z")
Hi team ! It will be very helpful if the following problem is resolved by any members in community!! Due to shards deletion on server wrt indices \>\> 1. fleet-servers-7, 2. .async-search The status of cluster is RED and even we cant see any logs in Analytics\>\>search in kibana because of unavailability of shards in .async search When i tried to rollover the indices since it is restricted indice , we are failed to rollover because of privilege mismatch .The error is shown below: ![Error-security exception](https://us1.discourse-cdn.com/elastic/original/3X/e/d/ed67cb6b6e564d6a51bd062ca97b7baaf6d077c4.png) Even though i tried to granted privilege that is mentioned in the error ! Failing to rollover the indice!! So kindly help me out how to resolve the mentioned problem!!! Note: we dont have any snapshot policy and backup . Thank you ! ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 18, 2024, 8:36am UTC](https://discuss.elastic.co/t/security-exception/355581/2 "2024-03-18T08:36:04Z")
Welcome! Did you try to restart Kibana? I don't know how it works behind the scene but it might try to recreate the missing indices. What is the output of: ```auto GET / GET /_cat/nodes?v GET /_cat/health?v GET /_cat/indices?v ``` If some outputs are too big, please share them on [gist.github.com](http://gist.github.com) and link them here. Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable. Instead, paste the text and format it with `` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer. ---
**Author:** ![Ganesh\_DV1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_dv1/32/127025_2.png) [@Ganesh\_DV1](https://discuss.elastic.co/u/Ganesh_DV1)\ **Post date:** [March 18, 2024, 9:35am UTC](https://discuss.elastic.co/t/security-exception/355581/3 "2024-03-18T09:35:21Z")
Hi dadoonet! Appreciate your response and guidance !! I restarted kibana! even after that too im getting same security exception error when i try to rollover on above mentioned 2 restricted indices. Please find the following for asked queries: 2 - node elasticsearch Health is RED, 4 Unassigned indices please find the unassigned indexers: ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/c/5c1a586c2cd9dd8836d5450644cb2ecc41f9f244.png) ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [March 18, 2024, 10:19am UTC](https://discuss.elastic.co/t/security-exception/355581/4 "2024-03-18T10:19:38Z")
> [@Ganesh\_DV1](#): > > when i try to rollover on above mentioned 2 restricted indices. What are you trying to rollover those indices? I cannot follow how that action relates to your problem of: > [@Ganesh\_DV1](#): > > The status of cluster is RED and even we cant see any logs in Analytics\>\>search in kibana because of unavailability of shards in .async search Rollover isn't the solution for unavailable shards. ---
**Author:** ![Ganesh\_DV1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_dv1/32/127025_2.png) [@Ganesh\_DV1](https://discuss.elastic.co/u/Ganesh_DV1)\ **Post date:** [March 18, 2024, 10:36am UTC](https://discuss.elastic.co/t/security-exception/355581/5 "2024-03-18T10:36:08Z")
Hi TiimV, (Restricted Indices).fleet-servers-7 and .async-search indices data has been deleted via server so in those indices shards are unavailable . When i try to delete those indices the security exception error is getting because of privilege issues to the user, clearly pointed in the attached document above . so my query is how to make "allow\_restricted\_indices": false to True. so that i can do changes in the restricted indices !! Feel free to ask anymore info needed! Thank you ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 18, 2024, 11:13am UTC](https://discuss.elastic.co/t/security-exception/355581/6 "2024-03-18T11:13:32Z")
Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable. Instead, paste the text and format it with `` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer. It would be great if you could update your post to solve this. ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [March 19, 2024, 2:34am UTC](https://discuss.elastic.co/t/security-exception/355581/7 "2024-03-19T02:34:10Z")
> [@Ganesh\_DV1](#): > > so my query is how to make "allow\_restricted\_indices": false to True. so that i can do changes in the restricted indices !! You cannot change the permissions of the `elastic` user or the `superuser` role. You need to create a new user and role in order to manage these indices. It is intentional that there are no out-of-the-box users that can manipulate system indices (you should never need to do this) ---
**Author:** ![Ganesh\_DV1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_dv1/32/127025_2.png) [@Ganesh\_DV1](https://discuss.elastic.co/u/Ganesh_DV1)\ **Post date:** [March 20, 2024, 10:43am UTC](https://discuss.elastic.co/t/security-exception/355581/8 "2024-03-20T10:43:55Z")
Thanks for your response @ TimV ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 17, 2024, 10:44am UTC](https://discuss.elastic.co/t/security-exception/355581/9 "2024-04-17T10:44:30Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.