# unable to set index level permission searchguard

**URL:** <https://forum.search-guard.com/t/unable-to-set-index-level-permission-searchguard/744>\
**Category:** Search Guard\
**Created:** [January 22, 2018, 2:44pm UTC](https://forum.search-guard.com/t/unable-to-set-index-level-permission-searchguard/744 "2018-01-22T14:44:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kanchankachare88](https://avatars.discourse-cdn.com/v4/letter/k/b782af/32.png) [@kanchankachare88](https://forum.search-guard.com/u/kanchankachare88)\
**Post date:** [January 22, 2018, 2:44pm UTC](https://forum.search-guard.com/t/unable-to-set-index-level-permission-searchguard/744/1 "2018-01-22T14:44:37Z")

</div>

Hi Team,

**I am getting below issue:**

[security\_exception] no permissions for [indices:data/read/search] and User [name=ajitnew, roles=[sg\_kibana\_user], requestedTenant=null, attributes={}]

**sg\_internal\_users.yml**

amit:

hash: $2y$12$oxNBLRDHhKimu35tKIJ5y.mzlTxGSaPwQBAE5pyNdMZnaNF83bKk.

roles:

- sg\_amitrole

**sg\_roles.yml**

sg\_amitrole:

cluster:

- CLUSTER\_COMPOSITE\_OPS\_RO

indices:

‘testnewindex’:

‘testtype’:

- indices:data/read/search

**sg\_roles\_mapping.yml**

sg\_amitrole:

users:

- amit

**where user is: amit, custom role is: sg\_amitrole, index name is: testnewindex.**

nothing is showing after login with amit.It is showing error for index level permission.

searchguard,elasticsearch and kibana version is 6.0.0

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [January 22, 2018, 3:52pm UTC](https://forum.search-guard.com/t/unable-to-set-index-level-permission-searchguard/744/2 "2018-01-22T15:52:44Z")

</div>

you are logged in as ajitnew, not as amit

> **···**
>
> > Am 22.01.2018 um 15:44 schrieb kanchankachare88@gmail.com:
> > 
> > Hi Team,
> > 
> > I am getting below issue:
> > 
> > [security\_exception] no permissions for [indices:data/read/search] and User [name=ajitnew, roles=[sg\_kibana\_user], requestedTenant=null, attributes={}]
> > 
> > sg\_internal\_users.yml
> > 
> > amit:  
> > &nbsp;&nbsp;hash: $2y$12$oxNBLRDHhKimu35tKIJ5y.mzlTxGSaPwQBAE5pyNdMZnaNF83bKk.  
> > &nbsp;&nbsp;roles:  
> > &nbsp;&nbsp;&nbsp;&nbsp;- sg\_amitrole
> > 
> > sg\_roles.yml
> > 
> > sg\_amitrole:  
> > &nbsp;&nbsp;cluster:  
> > &nbsp;&nbsp;&nbsp;&nbsp;- CLUSTER\_COMPOSITE\_OPS\_RO  
> > &nbsp;&nbsp;indices:  
> > &nbsp;&nbsp;&nbsp;&nbsp;'testnewindex':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'testtype':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/search
> > 
> > sg\_roles\_mapping.yml
> > 
> > sg\_amitrole:  
> > &nbsp;&nbsp;users:  
> > &nbsp;&nbsp;&nbsp;&nbsp;- amit
> > 
> > where user is: amit, custom role is: sg\_amitrole, index name is: testnewindex.
> > 
> > nothing is showing after login with amit.It is showing error for index level permission.
> > 
> > searchguard,elasticsearch and kibana version is 6.0.0
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/2ba42ee9-0b1a-40c0-a0ae-861b5a40eee5%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/2ba42ee9-0b1a-40c0-a0ae-861b5a40eee5%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![kanchankachare88](https://avatars.discourse-cdn.com/v4/letter/k/b782af/32.png) [@kanchankachare88](https://forum.search-guard.com/u/kanchankachare88)\
**Post date:** [January 23, 2018, 6:31am UTC](https://forum.search-guard.com/t/unable-to-set-index-level-permission-searchguard/744/3 "2018-01-23T06:31:41Z")

</div>

sorry, the user is amit there.

> **···**
>
> On Monday, 22 January 2018 21:22:46 UTC+5:30, Search Guard wrote:
> 
> > you are logged in as ajitnew, not as amit
> > 
> > > Am 22.01.2018 um 15:44 schrieb [kanchank...@gmail.com](mailto:kanchank...@gmail.com):
> > 
> > > Hi Team,
> > 
> > > I am getting below issue:
> > 
> > > [security\_exception] no permissions for [indices:data/read/search] and User [name=ajitnew, roles=[sg\_kibana\_user], requestedTenant=null, attributes={}]
> > 
> > > sg\_internal\_users.yml
> > 
> > > amit:
> > 
> > > hash: $2y$12$oxNBLRDHhKimu35tKIJ5y.mzlTxGSaPwQBAE5pyNdMZnaNF83bKk.
> > 
> > > roles:
> > 
> > > ```
> > > - sg_amitrole
> > > 
> > > ```
> > 
> > > sg\_roles.yml
> > 
> > > sg\_amitrole:
> > 
> > > cluster:
> > 
> > > ```
> > > - CLUSTER_COMPOSITE_OPS_RO  
> > > 
> > > ```
> > 
> > > indices:
> > 
> > > ```
> > > 'testnewindex':
> > > 
> > > ```
> > 
> > > ```
> > > 'testtype':  
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/search
> > > 
> > > ```
> > 
> > > sg\_roles\_mapping.yml
> > 
> > > sg\_amitrole:
> > 
> > > users:
> > 
> > > ```
> > > - amit
> > > 
> > > ```
> > 
> > > where user is: amit, custom role is: sg\_amitrole, index name is: testnewindex.
> > 
> > > nothing is showing after login with amit.It is showing error for index level permission.
> > 
> > > searchguard,elasticsearch and kibana version is 6.0.0
> > 
> > > –  
> > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group.
> > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).
> > 
> > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).
> > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/2ba42ee9-0b1a-40c0-a0ae-861b5a40eee5%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/2ba42ee9-0b1a-40c0-a0ae-861b5a40eee5%40googlegroups.com).
> > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
