# Time Picker issue in Kibana with Shield **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [November 27, 2016, 6:40pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279 "2016-11-27T18:40:57Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Post date:** [November 27, 2016, 6:40pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/1 "2016-11-27T18:40:57Z")
I created 1 admin(File realm), 2 users (Native realm) using Shield. Admin created with `esusers -r admin` command (so, all indices, all privileges) User1 has "all privileges" to 3 indices in the cluster. User2 has "all privileges" to 5 indices in the cluster (with field level security) I could execute queries on ES side, without any issues. I configured Kibana with link provided in docs [here](https://www.elastic.co/guide/en/shield/current/kibana.html). But, when I login using the user credentials (either User1 or User2), I could not see "Time Picker" on the top-right hand corner of the Kibana Dashboard. If I login as Admin, I can see that. I would like to have this Time Picker in Kibana even for native users. Please help me out. ---
**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\ **Post date:** [November 27, 2016, 10:11pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/2 "2016-11-27T22:11:30Z")
Which version(s) are you using? ---
**Author:** ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Post date:** [November 27, 2016, 11:13pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/3 "2016-11-27T23:13:07Z")
Kibana 4.6 ES 2.4 Shield 2.4 ---
**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\ **Post date:** [November 27, 2016, 11:33pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/4 "2016-11-27T23:33:37Z")
Thanks! Each of the users will need "kibana user" privileges, which grant them access to the .kibana index, and cluster monitoring. Here's an example kibana\_user role derived from [here](https://www.elastic.co/guide/en/shield/current/kibana.html#kibana4-user-role): ```auto kibana_user: cluster: - monitor indices: - names: '.kibana*' privileges: - manage - read - index ``` If you create this role and assign it to those two users, I expect that Kibana will begin working as expected. tbh, I haven't heard of the time picker not showing up, but I'm imagining it's related. ---
**Author:** ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Post date:** [November 28, 2016, 12:10am UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/5 "2016-11-28T00:10:12Z")
Yes. I have given the privileges to both the users to access `.kibana` index. Otherwise, I was not even able to open the Kibana dashboard using these user credentials. I created 2 roles Role1, Role2 and assigned Role1 to User1 and Role2 to User2. Below are the commands: ``` curl -u admin -XPOST 'http://localhost:9200/_shield/role/role1' -d' { "cluster": ["all"], "indices": [ { "names:" [, .kibana*] "privileges:" ["all"] } ] }' curl -u admin -XPOST 'http://localhost:9200/_shield/role/role2' -d' { "cluster": ["all"], "indices": [ { "names:" [, .kibana*] "privileges:" ["all"] "fields": [] } ] }' ``` I can see the entire Kibana Dashboard exactly as I want based on the user roles I created. But, the only problem is, for these users, I cannot see the TimePicker on top-right hand corner. If I login as admin, I can see TimePicker. This admin user is created in File realm (esusers -r admin), where as users are created in Native Realm. I also gave following configuration in elasticsearch.yaml: ``` shield: authc: realms: native: type: native order: 0 file: type: file order: 1 ``` ---
**Author:** ![imHarshj](https://avatars.discourse-cdn.com/v4/letter/i/e495f1/32.png) [@imHarshj](https://discuss.elastic.co/u/imHarshj)\ **Post date:** [November 29, 2016, 3:23pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/6 "2016-11-29T15:23:41Z")
Have you installed Kibana in the /opt/kibana/installedPlugins directory yet? I believe I ran into something similar. If you're using Shield, see step 6 here: [https://www.elastic.co/guide/en/shield/current/kibana.html](https://www.elastic.co/guide/en/shield/current/kibana.html) ---
**Author:** ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Post date:** [November 29, 2016, 11:19pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/7 "2016-11-29T23:19:01Z")
I haven't done that, but the problem seems to be solved. I cannot reproduce the issue now. All I did was I deleted all the indices, including `.kibana` index, and restarted Kibana. I think the problem might be with `.kibana` index caching some data, and I have been managing lots of user roles, users, performing snapshots and restore. I will keep your suggestion in mind, and if I come to this issue again, I will give a try with Step 6 from your link. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 27, 2016, 11:19pm UTC](https://discuss.elastic.co/t/time-picker-issue-in-kibana-with-shield/67279/8 "2016-12-27T23:19:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.