# No permissions for \[cluster:monitor/shards\]

**URL:** <https://forum.opensearch.org/t/no-permissions-for-cluster-monitor-shards/24081>\
**Category:** Security\
**Created:** [April 10, 2025, 11:10am UTC](https://forum.opensearch.org/t/no-permissions-for-cluster-monitor-shards/24081 "2025-04-10T11:10:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jong](https://avatars.discourse-cdn.com/v4/letter/j/82dd89/32.png) [@jong](https://forum.opensearch.org/u/jong)\
**Post date:** [April 10, 2025, 11:10am UTC](https://forum.opensearch.org/t/no-permissions-for-cluster-monitor-shards/24081/1 "2025-04-10T11:10:27Z")

</div>

**Versions** : OpenSearch 2.19.0

**Describe the issue** :  
I’m seeing an error a lot in my logs

`No cluster-level perm match for User [name=curator, backend_roles=[], requestedTenant=null] Resolved [aliases=[*], allIndices=[*], types=[*], originalRequested=[*], remoteIndices=[]] [Action [cluster:monitor/shards]] [RolesChecked [curator_role, own_index]]. No permissions for [cluster:monitor/shards]`

But when I try to add that permission to the role Dashboards says `cluster:monitor/shards doesn't match any options`

This permission doesn’t seem to be listed in the docs:

> **[Permissions](https://opensearch.org/docs/latest/security/access-control/permissions/#monitoring-permissions)**
>
> Permissions

Any idea why am I getting this error and why I can’t add or find in the docs?

---

<div class="post-metadata">

**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\
**Post date:** [April 11, 2025, 10:24am UTC](https://forum.opensearch.org/t/no-permissions-for-cluster-monitor-shards/24081/2 "2025-04-11T10:24:36Z")

</div>

> [@jong](#):
>
> cluster:monitor/shards

Hi @jong,

I have managed to add the `cluster:monitor/shards` to my role via config files (roles.yml):

```auto
test:
  reserved: false
  cluster_permissions:
    - "cluster_composite_ops"
    - "cluster:monitor/shards"
  index_permissions:
    - index_patterns:
        - '*'
      allowed_actions:
        - "indices_all"

```

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/8/80807605d4b870182bd2152d94189cf123350ec5.png)

However, I ran into the same issue as you when trying to do it via UI, BUG?

As a workaround, use your config files. Make sure to back up your configuration before applying any changes, as whatever is in the files will override it.

You could also report the behavior here:

> **[GitHub - opensearch-project/security: 🔐 Secure your cluster with TLS, numerous...](https://github.com/opensearch-project/security)**
>
> 🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit logging as well as role-based access control on indices, documents, and fields

Best,  
mj

---

<div class="post-metadata">

**Author:** ![jong](https://avatars.discourse-cdn.com/v4/letter/j/82dd89/32.png) [@jong](https://forum.opensearch.org/u/jong)\
**Post date:** [April 22, 2025, 11:29am UTC](https://forum.opensearch.org/t/no-permissions-for-cluster-monitor-shards/24081/3 "2025-04-22T11:29:16Z")

</div>

I managed to add it by directly calling the \_security API. Will file a bug. Thanks!