# getting  index-level permission issue in searchguard 6.0.0

**URL:** <https://forum.search-guard.com/t/getting-index-level-permission-issue-in-searchguard-6-0-0/748>\
**Category:** Search Guard\
**Created:** [January 23, 2018, 1:18pm UTC](https://forum.search-guard.com/t/getting-index-level-permission-issue-in-searchguard-6-0-0/748 "2018-01-23T13:18:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kanchankachare88](https://avatars.discourse-cdn.com/v4/letter/k/b782af/32.png) [@kanchankachare88](https://forum.search-guard.com/u/kanchankachare88)\
**Post date:** [January 23, 2018, 1:18pm UTC](https://forum.search-guard.com/t/getting-index-level-permission-issue-in-searchguard-6-0-0/748/1 "2018-01-23T13:18:45Z")

</div>

Hi Team,

**I am getting below error:**

[security\_exception] no permissions for [indices:data/read/search] and User [name=himali, roles=[sg\_role\_him], requestedTenant=null, attributes={}]

**sg\_internal\_users.yml**

himali:

hash: $2y$12$6j51H42C8ebZc7fiLfaNC.FtQHC0rPXqMlXNYGXVJ1paxGhAu/PTG

roles:

- sg\_role\_him

**sg\_roles.yml**

sg\_role\_him:

indices:

‘producer’:

‘logtype’:

indices:data/read/get

indices:data/read/search

**sg\_roles\_mapping.yml**

sg\_role\_him:

```
indices:

'producer':

  'logtype':

    - sg_role_him

```

**elasticsearch,kibana and searchguard version:6.0.0**

please help me to save my day!!!

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [January 25, 2018, 1:55pm UTC](https://forum.search-guard.com/t/getting-index-level-permission-issue-in-searchguard-6-0-0/748/2 "2018-01-25T13:55:13Z")

</div>

Please refer to the documentation on how to set up Kibana users:

e class="onebox allowlistedgeneric" data-onebox-src="https://docs.search-guard.com/latest/kibana-plugin-installation"\> ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/a/a7bf7021c01298cd3697ef52d1cef105d23e3938.png)[docs.search-guard.com](https://docs.search-guard.com/latest/kibana-plugin-installation)

 ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/optimized/2X/f/f9a363441adfd974e22366f0f05f0e6e0d3e539b_2_690x362.png)

### [Installing the Plugin](https://docs.search-guard.com/latest/kibana-plugin-installation)

How to install the Search Guard Kibana plugin which adds authentication, multi-tenancy and the configuration UI.

“Configuring Elasticsearch: Adding Kibana users”

In addition to the READ permissions on your index, any Kibana user needs a minimum set of Kibana specific permissions. These are shipped in the sg\_kibana\_user role. So either assign this role in addition to your user, or use the sg\_kibana\_user role as a blueprint for your own role definition:

sg\_kibana\_user:  
cluster:  
- MONITOR  
- CLUSTER\_COMPOSITE\_OPS\_RO  
indices:  
‘?kibana’:  
‘_':  
- MANAGE  
- INDEX  
- READ  
- DELETE  
'_’:  
‘\*’:  
- indices:data/read/field\_caps

``

> **···**
>
> On Tuesday, January 23, 2018 at 2:18:45 PM UTC+1, [kanchankachare88@gmail.com](mailto:kanchankachare88@gmail.com) wrote:
> 
> > Hi Team,
> 
> > **I am getting below error:**
> 
> > [security\_exception] no permissions for [indices:data/read/search] and User [name=himali, roles=[sg\_role\_him], requestedTenant=null, attributes={}]
> 
> > 
> 
> > **sg\_internal\_users.yml**
> 
> > 
> 
> > himali:
> 
> > hash: $2y$12$6j51H42C8ebZc7fiLfaNC.FtQHC0rPXqMlXNYGXVJ1paxGhAu/PTG
> 
> > roles:
> 
> > - sg\_role\_him
> 
> > 
> 
> > **sg\_roles.yml**
> 
> > 
> 
> > sg\_role\_him:
> 
> > indices:
> 
> > ‘producer’:
> 
> > ‘logtype’:
> 
> > indices:data/read/get
> 
> > indices:data/read/search
> 
> > 
> 
> > **sg\_roles\_mapping.yml**
> 
> > 
> 
> > sg\_role\_him:
> 
> > ```
> > indices:
> > 
> > ```
> 
> > ```
> > 'producer':
> > 
> > ```
> 
> > ```
> > 'logtype':
> > 
> > ```
> 
> > ```
> > - sg_role_him
> > 
> > ```
> 
> > 
> 
> > 
> 
> > **elasticsearch,kibana and searchguard version:6.0.0**
> 
> > please help me to save my day!!!
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> >