# Xpack - User unauthorized to to curl Health checks
**URL:** https://discuss.elastic.co/t/xpack-user-unauthorized-to-to-curl-health-checks/225143
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [March 26, 2020, 8:42am UTC](https://discuss.elastic.co/t/xpack-user-unauthorized-to-to-curl-health-checks/225143 "2020-03-26T08:42:57Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)
#### Post date: [March 26, 2020, 8:42am UTC](https://discuss.elastic.co/t/xpack-user-unauthorized-to-to-curl-health-checks/225143/1 "2020-03-26T08:42:57Z")
Hello guys,
i succesfully setup Xpack in my ELK-Cluster - now i have to get my monitoring to no throw any errors when checking
> /\_cluster/health?pretty
So i added a user called "checkmk" with the following command:
`bin/elasticsearch-users useradd checkmk -p XXXXXXX -r monitoring_user,kibana_admin`
I used the built-in roles from elasticsearch - i thought this might do it's thing - but everytime i try to authenticate with the user (after i restarted elasticsearch) i get the following error:
`{"error":{"root_cause":[{"type":"security_exception","reason":"action [cluster:monitor/state] is unauthorized for user [checkmk]"}],"type":"security_exception","reason":"action [cluster:monitor/state] is unauthorized for user [checkmk]"},"status":403}[`
Does anybody know what priviliges i have to grant the user to check this? I would not like to give him 'superuser' role.
I'm using ELK v 7.6 and i have not configured any roles on my own by now.
Thanks in advance!
---
### Author:  [@Magnus\_Kessler](https://discuss.elastic.co/u/Magnus_Kessler)
#### Post date: [March 26, 2020, 9:04am UTC](https://discuss.elastic.co/t/xpack-user-unauthorized-to-to-curl-health-checks/225143/2 "2020-03-26T09:04:12Z")
You'll have to assign the built-in [`remote_monitoring_collector` role](https://www.elastic.co/guide/en/elasticsearch/reference/current/built-in-roles.html) to your `checkmk` user, or create a custom role with at least the `monitor` cluster privilege.
---
### Author:  [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)
#### Post date: [March 26, 2020, 9:21am UTC](https://discuss.elastic.co/t/xpack-user-unauthorized-to-to-curl-health-checks/225143/3 "2020-03-26T09:21:55Z")
Thanks for the fast solution!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 23, 2020, 9:21am UTC](https://discuss.elastic.co/t/xpack-user-unauthorized-to-to-curl-health-checks/225143/4 "2020-04-23T09:21:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.