# Missing permissions for user error when using notifications channel to Slack

**URL:** <https://forum.opensearch.org/t/missing-permissions-for-user-error-when-using-notifications-channel-to-slack/11299>\
**Category:** Security\
**Created:** [October 21, 2022, 6:23am UTC](https://forum.opensearch.org/t/missing-permissions-for-user-error-when-using-notifications-channel-to-slack/11299 "2022-10-21T06:23:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![victor](https://avatars.discourse-cdn.com/v4/letter/v/3e96dc/32.png) [@victor](https://forum.opensearch.org/u/victor)\
**Post date:** [October 21, 2022, 6:23am UTC](https://forum.opensearch.org/t/missing-permissions-for-user-error-when-using-notifications-channel-to-slack/11299/1 "2022-10-21T06:23:07Z")

</div>

Github issue here: [[BUG] No cluster-level perm match for User · Issue #2182 · opensearch-project/security · GitHub](https://github.com/opensearch-project/security/issues/2182)

But basically, we’ve been having issues with some of our alerts ending up in ERROR state after upgrading to 2.3.0, with the following error message:

`Error: Failed running action: org.opensearch.OpenSearchSecurityException: no permissions for [cluster:admin/opensearch/notifications/configs/get] and associated roles [reports_full_access, own_index, itdev, alerting_full_access, anomaly_full_access]`

If i go into the logs of one of the OpenSearch data nodes i can see this log appears multiple times:  
` [2022-10-18T15:02:03,042][INFO][o.o.s.p.PrivilegesEvaluator] [opensearch-node01] No cluster-level perm match for User [name=plugin, backend_roles=[], requestedTenant=null] Resolved [aliases=[*], allIndices=[*], types=[*], originalRequested=[*], remoteIndices=[]] [Action [cluster:admin/opensearch/notifications/configs/get]] [RolesChecked [reports_full_access, own_index, itdev, alerting_full_access, anomaly_full_access]]. No permissions for [cluster:admin/opensearch/notifications/configs/get]`

What strikes me as odd is the “name=plugin” field here; `No cluster-level perm match for User [name=plugin`

How can i see which user is missing the required permissions? Has anyone else been experiencing something similar?

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [November 4, 2022, 3:33pm UTC](https://forum.opensearch.org/t/missing-permissions-for-user-error-when-using-notifications-channel-to-slack/11299/2 "2022-11-04T15:33:26Z")

</div>

@victor Do you have the user **plugin** in use?