# Can't create user with role using Kibana GUI

**URL:** <https://forum.opensearch.org/t/cant-create-user-with-role-using-kibana-gui/3734>\
**Category:** Security\
**Created:** [September 10, 2020, 4:12pm UTC](https://forum.opensearch.org/t/cant-create-user-with-role-using-kibana-gui/3734 "2020-09-10T16:12:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nik360](https://avatars.discourse-cdn.com/v4/letter/n/47e85d/32.png) [@nik360](https://forum.opensearch.org/u/nik360)\
**Post date:** [September 10, 2020, 4:12pm UTC](https://forum.opensearch.org/t/cant-create-user-with-role-using-kibana-gui/3734/1 "2020-09-10T16:12:29Z")

</div>

I am trying to create a user using the Kibana GUI. I am following these steps:

1. Open Kibana
2. Log in as admin
3. Security\> Internal User Database\> Add a new internal user
4. Provide username and password
5. In the Open Distro Security Rolesds field, select the role
6. Click Add backend role

But instead of creating a user, there is a redirect to the authorization page `/login?Type=basicauthLogout`  
I am running odfe in docker. I am using the demo config provided by the docker image.  
Images version 1.9.0

In the kibana log:  
`odfe-kibana | {"type":"response","@timestamp":"2020-09-07T14:22:15Z","tags":[],"pid":1,"method":"post","statusCode":403,"req":{"url":"/api/v1/configuration/internalusers/test","method":"post","headers":{"host":"192.168.1.3:5601","connection":"keep-alive","content-length":"97","accept":"application/json, text/plain, */*","kbn-version":"7.8.0","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36","content-type":"application/json;charset=UTF-8","origin":"http://192.168.1.3:5601","referer":"http://192.168.1.3:5601/app/security-configuration","accept-encoding":"gzip, deflate","accept-language":"ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7","securitytenant":" __user__"},"remoteAddress":"11.11.11.11","userAgent":"11.11.11.11","referer":"http://192.168.1.3:5601/app/security-configuration"},"res":{"statusCode":403,"responseTime":14,"contentLength":9},"message":"POST /api/v1/configuration/internalusers/test 403 14ms - 9.0B"}`

In the elastic log:

```auto
odfe-node1 | [2020-09-07T14:21:56,376][INFO][stdout] [odfe-node1] [FINE] No subscribers registered for event class com.amazon.opendistroforelasticsearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
odfe-node1 | [2020-09-07T14:21:56,376][INFO][stdout] [odfe-node1] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent

```

What could be the problem? What settings are missing?

Thanks!

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [March 4, 2021, 2:55pm UTC](https://forum.opensearch.org/t/cant-create-user-with-role-using-kibana-gui/3734/2 "2021-03-04T14:55:42Z")

</div>

@nik360 this seems to be a bug in 1.9. The option to add backend roles was removed in versions 1.10-12 inclusive, 1.13 however has the option again and seems to work as expected. If you need this functionality perhaps upgrading to 1.13.0 would be the simplest solution?