# We want to define authority for our software developer friends to create indexes within Elastic Searc Kibana

**URL:** <https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369>\
**Category:** Kibana\
**Created:** [May 13, 2024, 11:16am UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369 "2024-05-13T11:16:29Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![aydin\_yilmaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aydin_yilmaz/32/129895_2.png) [@aydin\_yilmaz](https://discuss.elastic.co/u/aydin_yilmaz)\
**Post date:** [May 13, 2024, 11:16am UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/1 "2024-05-13T11:16:29Z")

</div>

Hello friends

We want to define authority for our software developer friends to create indexes within Elastic Searc Kibana, but this authority should never be superuser because we do the resource management. How can we define this authority? We assigned all user roles, but the result is not successful.

---

<div class="post-metadata">

**Author:** ![aydin\_yilmaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aydin_yilmaz/32/129895_2.png) [@aydin\_yilmaz](https://discuss.elastic.co/u/aydin_yilmaz)\
**Post date:** [May 13, 2024, 1:18pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/2 "2024-05-13T13:18:38Z")

</div>

![Screenshot_12](https://us1.discourse-cdn.com/elastic/original/3X/4/9/49edee35be0c4d6677f3f1fcd3c2b72d6df464f4.png)

The error they encountered is as follows.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 13, 2024, 1:50pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/3 "2024-05-13T13:50:21Z")

</div>

What are the permissions and roles that you are giving to your users?

The error is clear, the user does not have the `create_index` permission on the index `fileserver-document-search`.

You need to add this permission to a specific index or using a wildcard.

---

<div class="post-metadata">

**Author:** ![aydin\_yilmaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aydin_yilmaz/32/129895_2.png) [@aydin\_yilmaz](https://discuss.elastic.co/u/aydin_yilmaz)\
**Post date:** [May 13, 2024, 2:12pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/4 "2024-05-13T14:12:01Z")

</div>

We had authorized all users roles, we already expected that they would not exist. Then we gave logstach system permission, but it still didn't work. We temporarily gave superuser the ability to do it now, but we will get this authority again at the end of the day.

---

<div class="post-metadata">

**Author:** ![aydin\_yilmaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aydin_yilmaz/32/129895_2.png) [@aydin\_yilmaz](https://discuss.elastic.co/u/aydin_yilmaz)\
**Post date:** [May 13, 2024, 2:13pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/5 "2024-05-13T14:13:14Z")

</div>

We had authorized all users roles, we already expected that they would not exist. Then we gave logstach system permission, but it still didn't work. We temporarily gave superuser the ability to do it now, but we will get this authority again at the end of the day. Whichever of the admin roles I give, I can only give limited authority, that is, the authority to create indexes. I'm sorry, I don't have much knowledge on this subject and we are trying to move forward with limited knowledge.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 13, 2024, 2:23pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/6 "2024-05-13T14:23:55Z")

</div>

> [@aydin\_yilmaz](#):
>
> I don't have much knowledge on this subject and we are trying to move forward with limited knowledge.

You need to read the documentation about how permissions work on Elasticsearch, you can start [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/authorization.html).

For example, to be able to create an index, the user need to have a role with the `create_index` privilege on the index name you want to create or some pattern like `indexName-*`, without it you will not be able to create any index.

---

<div class="post-metadata">

**Author:** ![aydin\_yilmaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aydin_yilmaz/32/129895_2.png) [@aydin\_yilmaz](https://discuss.elastic.co/u/aydin_yilmaz)\
**Post date:** [May 13, 2024, 2:34pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/7 "2024-05-13T14:34:05Z")

</div>

![Screenshot_13](https://us1.discourse-cdn.com/elastic/original/3X/e/8/e8d3c6cf52100c44453ff9ef96dd3246ebe6d414.png)

Thank you for your answer. Is there a documentation link explaining the powers of these roles?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 13, 2024, 2:41pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369/8 "2024-05-13T14:41:11Z")

</div>

> [@aydin\_yilmaz](#):
>
> Is there a documentation link explaining the powers of these roles?

Yes, please check the previous answer, there is a link to the documentation.
