# Security role privilages indices to perform GET \_cat/indices

**URL:** <https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223>\
**Category:** Kibana\
**Created:** [May 12, 2020, 12:16pm UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223 "2020-05-12T12:16:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![qub123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/qub123/32/55327_2.png) [@qub123](https://discuss.elastic.co/u/qub123)\
**Post date:** [May 12, 2020, 12:16pm UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223/1 "2020-05-12T12:16:03Z")

</div>

Hi,

I am using Kibana 7.3.1.

I have setup a guest role for user to read dashboards, visualization, and perform read operation on the indexes.

But when I tried to perform "GET \_cat/indices" in devtool, I see problem below. Would someone can tell me what privilage is needed to perform this? I thinkik it need "monitor " privilege in the role, but after I set that, it still doesn't work.  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/a/aa50c8cb668248b9361d0b309cba4b7a105a9a9c.png)

```auto
{
  "error": {
    "root_cause": [
      {
        "type": "security_exception",
        "reason": "action [cluster:monitor/state] is unauthorized for user [guest]",
        "suppressed": [
          {
            "type": "security_exception",
            "reason": "action [cluster:monitor/health] is unauthorized for user [guest]"
          }
        ]
      }
    ],
    "type": "security_exception",
    "reason": "action [cluster:monitor/state] is unauthorized for user [guest]",
    "suppressed": [
      {
        "type": "security_exception",
        "reason": "action [cluster:monitor/health] is unauthorized for user [guest]"
      }
    ]
  },
  "status": 403
}

```

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [May 12, 2020, 8:23pm UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223/2 "2020-05-12T20:23:14Z")

</div>

Stating the obvious, but is the user assigned the correct role?

---

<div class="post-metadata">

**Author:** ![qub123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/qub123/32/55327_2.png) [@qub123](https://discuss.elastic.co/u/qub123)\
**Post date:** [May 13, 2020, 8:11am UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223/3 "2020-05-13T08:11:15Z")

</div>

Hi,

Yes the user assigned correct role, and I tried to login and logout on that user a few times.  
But it still doesn't work .

/Kenneth

---

<div class="post-metadata">

**Author:** ![qub123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/qub123/32/55327_2.png) [@qub123](https://discuss.elastic.co/u/qub123)\
**Post date:** [May 13, 2020, 10:08am UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223/4 "2020-05-13T10:08:12Z")

</div>

You can see my setting here, I actually try to give privileage "all" to guest user, and then press update role, on another browser with admin role.  
And logout and login again as guest user in another browser. But I still have the error when I perform GET \_cat/indices

The privilage for guest

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6a220623edb8b8c28dcf19f99468e42c5f02ddde.png)

Error when query

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/8/c8cfbe7e881bb9ea497275c1411bb4b6fc60e285.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 10, 2020, 10:08am UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223/5 "2020-06-10T10:08:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.