# Trouble with privileges about Kibana Actions

**URL:** <https://discuss.elastic.co/t/trouble-with-privileges-about-kibana-actions/382340>\
**Category:** Kibana\
**Created:** [October 1, 2025, 7:59am UTC](https://discuss.elastic.co/t/trouble-with-privileges-about-kibana-actions/382340 "2025-10-01T07:59:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alberto\_Russo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alberto_russo/32/140410_2.png) [@Alberto\_Russo](https://discuss.elastic.co/u/Alberto_Russo)\
**Post date:** [October 1, 2025, 7:59am UTC](https://discuss.elastic.co/t/trouble-with-privileges-about-kibana-actions/382340/1 "2025-10-01T07:59:24Z")

</div>

I had install Security Onion in standalone mode, and I tryed to create a new rule in Kibana. But if I want to assign an action to this rule he said “Cannot create rule actions. You do not have “Read” permissions for the “Actions” plugin.”. I’m log with a user who is in ‘superusers’ group.

 ![Screenshot (26)](https://us1.discourse-cdn.com/elastic/original/3X/5/2/52462bb24d6f8981f55cb97fb72f3c73f01efbd6.png)

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [October 4, 2025, 2:33am UTC](https://discuss.elastic.co/t/trouble-with-privileges-about-kibana-actions/382340/2 "2025-10-04T02:33:44Z")

</div>

Hello @Alberto_Russo

Welcome to the Community!!

We see below message on Kibana :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/9/a9635ebee10a875286995a3d7adf5777c58b1f85.png)

When you go to role , under Management :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/b/cba727fd64977e9c08acd45975d47be1858a9129.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/7/f7d356c055c06ff4666f49b1054aed9e2e22a5a2.png)

For this role , Actions and Connectors was set to None.

Thanks!!

---

<div class="post-metadata">

**Author:** ![Alberto\_Russo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alberto_russo/32/140410_2.png) [@Alberto\_Russo](https://discuss.elastic.co/u/Alberto_Russo)\
**Post date:** [October 16, 2025, 9:34am UTC](https://discuss.elastic.co/t/trouble-with-privileges-about-kibana-actions/382340/3 "2025-10-16T09:34:37Z")

</div>

Sorry for the delay, thank you very much for the solution