# Internal Users authetication and authorization problem

**URL:** <https://forum.search-guard.com/t/internal-users-authetication-and-authorization-problem/1194>\
**Category:** Search Guard\
**Created:** [November 19, 2018, 6:20am UTC](https://forum.search-guard.com/t/internal-users-authetication-and-authorization-problem/1194 "2018-11-19T06:20:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jithin\_P\_S](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@Jithin\_P\_S](https://forum.search-guard.com/u/Jithin_P_S)\
**Post date:** [November 19, 2018, 6:20am UTC](https://forum.search-guard.com/t/internal-users-authetication-and-authorization-problem/1194/1 "2018-11-19T06:20:29Z")

</div>

- Search Guard and Elasticsearch version

**6.4.1-23.1**

- Installed and used enterprise modules, if any

\*\*Community edition \*\*

- JVM version and operating system version

**ubuntu18**

- Search Guard configuration files

**I have used the default files given on installation**

When I gave the elasticsearch username and password in kibana.yml as **elastickibanserver,** I am able to login to but not able to see any data as I get the error as **no permission for the users.**

I used **admin username and password in kibana.yml then everything worked. But I logged in as normal user but could delete the index that I created. What am I doing wrong?**

In my internal user file, I could see **roles as admin, kibanaro etc. But not in the roles.yml file**

I haven’t changed anything in the config files and used them as they are shipped.

attaching the link here for your reference [https://github.com/floragunncom/search-guard/tree/master/sgconfig](https://github.com/floragunncom/search-guard/tree/master/sgconfig)

Please let me know what am I doing wrong.

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [December 12, 2018, 8:25am UTC](https://forum.search-guard.com/t/internal-users-authetication-and-authorization-problem/1194/2 "2018-12-12T08:25:19Z")

</div>

There is a roles mapping in between which is defined in sg\_roles\_mapping.yml.

Here is how it works: [Mapping users to Search Guard roles | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/mapping-users-roles#map-users-backend-roles-and-hosts-to-search-guard-roles)

Logging in with the kibanaro user should work out of the box.

> **···**
>
> On Monday, 19 November 2018 07:20:29 UTC+1, jithin wrote:
> 
> > - Search Guard and Elasticsearch version
> 
> > 
> 
> > **6.4.1-23.1**
> 
> > 
> 
> > - Installed and used enterprise modules, if any
> 
> > 
> 
> > \*\*Community edition \*\*
> 
> > - JVM version and operating system version
> 
> > **ubuntu18**
> 
> > - Search Guard configuration files
> 
> > 
> 
> > **I have used the default files given on installation**
> 
> > 
> 
> > When I gave the elasticsearch username and password in kibana.yml as **elastickibanserver,** I am able to login to but not able to see any data as I get the error as **no permission for the users.**
> 
> > I used **admin username and password in kibana.yml then everything worked. But I logged in as normal user but could delete the index that I created. What am I doing wrong?**
> 
> > In my internal user file, I could see **roles as admin, kibanaro etc. But not in the roles.yml file**
> 
> > I haven’t changed anything in the config files and used them as they are shipped.
> 
> > 
> 
> > attaching the link here for your reference [https://github.com/floragunncom/search-guard/tree/master/sgconfig](https://github.com/floragunncom/search-guard/tree/master/sgconfig)
> 
> > Please let me know what am I doing wrong.
> 
> > 
> 
> > 
> 
> > 
> 
> >