# Unable to create CSV report in kibana despite having superuser-like privileges

**URL:** <https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [November 17, 2025, 1:25pm UTC](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479 "2025-11-17T13:25:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Brumi](https://avatars.discourse-cdn.com/v4/letter/b/7cd45c/32.png) [@Brumi](https://discuss.elastic.co/u/Brumi)\
**Post date:** [November 17, 2025, 1:25pm UTC](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479/1 "2025-11-17T13:25:56Z")

</div>

Hello,

I have an Elasticsearch+Kibana cluster set up (version 8.17.2). Regular users (given the _editor_) role cannot create CSV reports from Discover, while I (having the _superuser_ role) can.

I have been trying to figure out which privileges I need to give a user to be able to generate reports. I am at a point where my custom role is identical to _superuser:_

```auto
GET /_security/role/superuser
{
  "superuser": {
    "cluster": [
      "all"
    ],
    "indices": [
      {
        "names": [
          "*"
        ],
        "privileges": [
          "all"
        ],
        "allow_restricted_indices": false
      },
      {
        "names": [
          "*"
        ],
        "privileges": [
          "monitor",
          "read",
          "view_index_metadata",
          "read_cross_cluster"
        ],
        "allow_restricted_indices": true
      }
    ],
    "applications": [
      {
        "application": "*",
        "privileges": [
          "*"
        ],
        "resources": [
          "*"
        ]
      }
    ],
    "run_as": [
      "*"
    ],
    "metadata": {
      "_reserved": true
    },
    "transient_metadata": {},
    "remote_indices": [
      {
        "names": [
          "*"
        ],
        "privileges": [
          "all"
        ],
        "allow_restricted_indices": false,
        "clusters": [
          "*"
        ]
      },
      {
        "names": [
          "*"
        ],
        "privileges": [
          "monitor",
          "read",
          "view_index_metadata",
          "read_cross_cluster"
        ],
        "allow_restricted_indices": true,
        "clusters": [
          "*"
        ]
      }
    ],
    "remote_cluster": [
      {
        "privileges": [
          "monitor_enrich",
          "monitor_stats"
        ],
        "clusters": [
          "*"
        ]
      }
    ],
    "description": "Grants full access to cluster management and data indices. This role also grants direct read-only access to restricted indices like .security. A user with this role can impersonate any other user in the system, manage security and create roles with unlimited privileges. Take extra care when assigning it to a user."
  }
}

```

```auto
GET /_security/role/myrole
{
  "myrole": {
    "cluster": [
      "all"
    ],
    "indices": [
      {
        "names": [
          "*"
        ],
        "privileges": [
          "all"
        ],
        "allow_restricted_indices": false
      },
      {
        "names": [
          "*"
        ],
        "privileges": [
          "monitor",
          "read",
          "view_index_metadata",
          "read_cross_cluster"
        ],
        "allow_restricted_indices": true
      }
    ],
    "applications": [
      {
        "application": "*",
        "privileges": [
          "*"
        ],
        "resources": [
          "*"
        ]
      }
    ],
    "run_as": [
      "*"
    ],
    "metadata": {},
    "transient_metadata": {
      "enabled": true
    },
    "remote_indices": [
      {
        "names": [
          "*"
        ],
        "privileges": [
          "all"
        ],
        "allow_restricted_indices": false,
        "clusters": [
          "*"
        ]
      },
      {
        "names": [
          "*"
        ],
        "privileges": [
          "monitor",
          "read",
          "view_index_metadata",
          "read_cross_cluster"
        ],
        "allow_restricted_indices": true,
        "clusters": [
          "*"
        ]
      }
    ],
    "remote_cluster": [
      {
        "privileges": [
          "monitor_enrich",
          "monitor_stats"
        ],
        "clusters": [
          "*"
        ]
      }
    ],
    "description": "Grants full access to cluster management and data indices. This role also grants direct read-only access to restricted indices like .security. A user with this role can impersonate any other user in the system, manage security and create roles with unlimited privileges. Take extra care when assigning it to a user."
  }
}

```

**TLDR** : Apart from metadata, the roles _superuser_ and _myrole_ are identical.

Despite this, if I assign the role _myrole_ to a user, he won’t be able to generate reports (getting the error message Forbidden), but if I assign _superuser_, then CSV reports can be generated.

With privileges like this, the user is supposed to be able to generate reports, right?

Thanks in advance!

Regards,  
Brumi

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [November 18, 2025, 7:33am UTC](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479/2 "2025-11-18T07:33:43Z")

</div>

Hello @Brumi

It seems you must be receiving below error message while using :

Error: Forbidden  
at fetch\_Fetch.fetchResponse ([http://ELK](http://ELK):PORT/alphanumeric/bundles/core/core.entry.js:16:232024)  
at async [http://ELK](http://ELK):PORT/alphanumeric/bundles/core/core.entry.js:16:230016  
at async [http://ELK](http://ELK):PORT/alphanumeric/bundles/core/core.entry.js:16:229973

We do not see the below highlighted option available until we set the roles line in kibana.yml and hence the error for Forbidden for custom role/user :

`xpack.reporting.roles.enabled: false`

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/3/a30dc91661759f59a9a5703716bd6eece07e4157.png)

> **[Configure reporting in Kibana | Kibana Guide \[8.17\] | Elastic](https://www.elastic.co/guide/en/kibana/8.17/secure-reporting.html#grant-user-access)**

Thanks!!

---

<div class="post-metadata">

**Author:** ![Brumi](https://avatars.discourse-cdn.com/v4/letter/b/7cd45c/32.png) [@Brumi](https://discuss.elastic.co/u/Brumi)\
**Post date:** [November 18, 2025, 8:49am UTC](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479/3 "2025-11-18T08:49:15Z")

</div>

Thanks very much, it looks like `xpack.reporting.roles.enabled: false` fixed it!