# Unable to Add role- elasticsearch xpack
**URL:** https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926
**Category:** Elasticsearch
**Created:** [February 7, 2018, 8:44pm UTC](https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926 "2018-02-07T20:44:48Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Francis\_Praveen](https://discuss.elastic.co/u/Francis_Praveen)
#### Post date: [February 7, 2018, 8:44pm UTC](https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926/1 "2018-02-07T20:44:48Z")
Hello, I am trying to setup Active Directory Security for the kibana dashboard. For that i tried to create role mapping but i am not able to create (i think i dont have manage\_security role). So I tried to add the role for the user "kibana". Its telling "action unauthorized for the user kibana". Can Anyone please help on this.
Thanks
---
### Author:  [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [February 8, 2018, 12:20am UTC](https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926/2 "2018-02-08T00:20:37Z")
> [@Francis\_Praveen](#):
>
> For that i tried to create role mapping but i am not able to create (i think i dont have manage\_security role)
Please provide more details. What did you try? What went wrong?
> [@Francis\_Praveen](#):
>
> So I tried to add the role for the user "kibana"
You cannot edit the `kibana` user. It is a fixed builtin user.
It sounds like you are logging into Kibana as the `kibana` user.
That's a common mistake that new users make.
The _kibana_ user is the user that the Kibana application uses for its own purposes when it connects to Elasticsearch. For example, it is how Kibana can tell whether your ES server is available, and whether it has security turned on. You should not log in to Kibana as that user, because it doesn't have permission to do very much (which is intentional - it has just enough access to run Kibana but no more)
You should initially login to Kibana using the `elastic` user. This is a _superuser_ that can do everything.
You _can_ use that user for everything you want to do, and always login to Kibana as _elastic_, but we don't recommend it. Because that user can do everything, it can make a horrible mess of your cluster if you're not careful, and one of the benefits of X-Pack security is that it can protect you from mistakes like that.
Rather, we recommend that you use the `elastic` user to login the first time, and then use the Kibana admin screens to create new, lower privileged users and roles that have just the permissions that you need, but nothing more. You can then safely use those users to do your work in Kibana, and you can always login as `elastic` if you need to make major changes.
---
### Author:  [@Francis\_Praveen](https://discuss.elastic.co/u/Francis_Praveen)
#### Post date: [February 8, 2018, 6:55pm UTC](https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926/3 "2018-02-08T18:55:57Z")
Thanks for your reply. Can you please let me know whats the default password for 'elastic' user
---
### Author:  [@Francis\_Praveen](https://discuss.elastic.co/u/Francis_Praveen)
#### Post date: [February 8, 2018, 7:01pm UTC](https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926/4 "2018-02-08T19:01:01Z")
Never mind..Got it thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 8, 2018, 7:01pm UTC](https://discuss.elastic.co/t/unable-to-add-role-elasticsearch-xpack/118926/5 "2018-03-08T19:01:23Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.