# Default admin role misses permissions to edit cluster settings

**URL:** <https://forum.opensearch.org/t/default-admin-role-misses-permissions-to-edit-cluster-settings/1630>\
**Category:** Security\
**Created:** [October 1, 2019, 6:19am UTC](https://forum.opensearch.org/t/default-admin-role-misses-permissions-to-edit-cluster-settings/1630 "2019-10-01T06:19:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![chaos](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/chaos/32/352_2.png) [@chaos](https://forum.opensearch.org/u/chaos)\
**Post date:** [October 1, 2019, 6:19am UTC](https://forum.opensearch.org/t/default-admin-role-misses-permissions-to-edit-cluster-settings/1630/1 "2019-10-01T06:19:17Z")

</div>

With a default configuration, I tried to PUT to `/_settings`

I got the following response:

```auto
{"error":{"root_cause":[{"type":"security_exception","reason":"no permissions for [] and User [name=admin, roles=[admin], requestedTenant=null]"}],"type":"security_exception","reason":"no permissions for [] and User [name=admin, roles=[admin], requestedTenant=null]"},"status":403}

```

Which I figured was strange. Is there a way to solve this?

---

<div class="post-metadata">

**Author:** ![chaos](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/chaos/32/352_2.png) [@chaos](https://forum.opensearch.org/u/chaos)\
**Post date:** [October 7, 2019, 5:28am UTC](https://forum.opensearch.org/t/default-admin-role-misses-permissions-to-edit-cluster-settings/1630/2 "2019-10-07T05:28:10Z")

</div>

Would appreciate a reply if anyone has any ideas.

---

<div class="post-metadata">

**Author:** ![chaos](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/chaos/32/352_2.png) [@chaos](https://forum.opensearch.org/u/chaos)\
**Post date:** [October 22, 2019, 11:30pm UTC](https://forum.opensearch.org/t/default-admin-role-misses-permissions-to-edit-cluster-settings/1630/3 "2019-10-22T23:30:52Z")

</div>

Still struggling with this ☹

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [May 25, 2021, 9:43am UTC](https://forum.opensearch.org/t/default-admin-role-misses-permissions-to-edit-cluster-settings/1630/4 "2021-05-25T09:43:57Z")

</div>

@chaos

Have you found a solution? Could you share the full curl you’ve tried to use?