# Using sgctl to create internal\_users file

**URL:** <https://forum.search-guard.com/t/using-sgctl-to-create-internal-users-file/2445>\
**Category:** Search Guard\
**Created:** [May 31, 2023, 8:01pm UTC](https://forum.search-guard.com/t/using-sgctl-to-create-internal-users-file/2445 "2023-05-31T20:01:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kkbrady](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@kkbrady](https://forum.search-guard.com/u/kkbrady)\
**Post date:** [May 31, 2023, 8:01pm UTC](https://forum.search-guard.com/t/using-sgctl-to-create-internal-users-file/2445/1 "2023-05-31T20:01:03Z")

</div>

I’m trying to work on migrating an older version of searchguard into sg flx.

I noticed in trying to create the sg\_internal\_users.yml file that the new version no longer has the hash.sh option. Instead, there is the documentation [Adding users | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/first-steps-user-configuration) which says you can generate or update the users there.  
But this sgctl tool doesn’t seem to allow you to also mark the user added as reserved:true  
This [Reserved resources | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/rest-api-reserved-hidden#reserved-resources) says we need to use sgctl to change reserved flag, but how is that done? do you have to manually edit the file and then upload the changed config?

---

<div class="post-metadata">

**Author:** ![nils](https://avatars.discourse-cdn.com/v4/letter/n/d6d6ee/32.png) [@nils](https://forum.search-guard.com/u/nils)\
**Post date:** [June 9, 2023, 8:51pm UTC](https://forum.search-guard.com/t/using-sgctl-to-create-internal-users-file/2445/2 "2023-06-09T20:51:03Z")

</div>

You can either set the flag by manually editing the user.

Alternatively, it might be possible to use sgctl set:

```auto
sgctl.sh set internalusers your_user.reserved --true

```

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [June 30, 2023, 8:51pm UTC](https://forum.search-guard.com/t/using-sgctl-to-create-internal-users-file/2445/3 "2023-06-30T20:51:30Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.