# No permissions for \[indices:data/read/search\]

**URL:** <https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380>\
**Category:** Search Guard\
**Created:** [December 12, 2022, 5:47am UTC](https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380 "2022-12-12T05:47:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![hello4usharath](https://avatars.discourse-cdn.com/v4/letter/h/97f17d/32.png) [@hello4usharath](https://forum.search-guard.com/u/hello4usharath)\
**Post date:** [December 12, 2022, 5:47am UTC](https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380/1 "2022-12-12T05:47:21Z")

</div>

No index-level perm match for User sg\_anonymous [backend\_roles=[sg\_anonymous\_backendrole]] Resolved [aliases=[.kibana\_7.17.7], indices=, allIndices=[.kibana\_7.17.7\_001], types=[\*], originalRequested=[.kibana\_7.17.7], remoteIndices=, localAll=false, indicesOptions=IndicesOptions[ignore\_unavailable=false, allow\_no\_indices=true, expand\_wildcards\_open=true, expand\_wildcards\_closed=false, expand\_wildcards\_hidden=false, allow\_aliases\_to\_multiple\_indices=true, forbid\_closed\_indices=false, ignore\_aliases=false, ignore\_throttled=false]] [Action [indices:data/read/search]] [RolesChecked [sg\_anonymous, SGS\_OWN\_INDEX]]  
[2022-12-09T17:38:02,396][INFO][c.f.s.p.PrivilegesEvaluator] [bldafinsgt-stg-es1] No permissions for [indices:data/read/search]

---

<div class="post-metadata">

**Author:** ![hello4usharath](https://avatars.discourse-cdn.com/v4/letter/h/97f17d/32.png) [@hello4usharath](https://forum.search-guard.com/u/hello4usharath)\
**Post date:** [December 12, 2022, 5:51am UTC](https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380/2 "2022-12-12T05:51:07Z")

</div>

sg\_roles.yml:  
sg\_anonymous:  
cluster\_permissions:  
- “SGS\_CLUSTER\_COMPOSITE\_OPS\_RO”  
- “cluster:monitor/health”  
tenant\_permissions:  
- tenant\_patterns:  
- “global\_tenant”

---

<div class="post-metadata">

**Author:** ![nils](https://avatars.discourse-cdn.com/v4/letter/n/d6d6ee/32.png) [@nils](https://forum.search-guard.com/u/nils)\
**Post date:** [December 12, 2022, 8:34am UTC](https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380/3 "2022-12-12T08:34:59Z")

</div>

Hello,

it would be kinda helpful if you would include the version of Search Guard and ask a question.

---

<div class="post-metadata">

**Author:** ![hello4usharath](https://avatars.discourse-cdn.com/v4/letter/h/97f17d/32.png) [@hello4usharath](https://forum.search-guard.com/u/hello4usharath)\
**Post date:** [December 12, 2022, 9:33am UTC](https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380/4 "2022-12-12T09:33:55Z")

</div>

Hi,

Search guard : 53.5.0  
Not able to login to elasticsearch or Kibana using browser. getting below error

{“error”:{“root\_cause”:[{“type”:“security\_exception”,“reason”:“no permissions for [cluster:monitor/main] and User sg\_anonymous [backend\_roles=[sg\_anonymous\_backendrole]]”}],“type”:“security\_exception”,“reason”:“no permissions for [cluster:monitor/main] and User sg\_anonymous [backend\_roles=[sg\_anonymous\_backendrole]]”},“status”:403}  
Tried all options not to able resolve.  
Below are my roles.yml & roles\_mapping.yml

Role mapping  
sg\_anonymous:  
backend\_roles:

- “admin”
- “sg\_anonymous\_backendrole”
- “SGS\_ALL\_ACCESS”

Roles.yml  
sg\_anonymous:  
cluster\_permissions:  
- “SGS\_CLUSTER\_COMPOSITE\_OPS\_RO”  
- “cluster:monitor/health”  
- “cluster:monitor/state”  
- “SGS\_ALL\_ACCESS”  
index\_permissions:  
- index\_patterns:  
- “\*”  
allowed\_actions:  
- “READ”  
- “WRITE”  
- SGS\_INDICES\_MONITOR  
tenant\_permissions:  
- tenant\_patterns:  
- “global\_tenant”

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [January 2, 2023, 9:34am UTC](https://forum.search-guard.com/t/no-permissions-for-indices-data-read-search/2380/5 "2023-01-02T09:34:22Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.