# Permission Issue Setting Up Dashboards

**URL:** <https://forum.opensearch.org/t/permission-issue-setting-up-dashboards/8112>\
**Category:** Security\
**Created:** [December 22, 2021, 4:21pm UTC](https://forum.opensearch.org/t/permission-issue-setting-up-dashboards/8112 "2021-12-22T16:21:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jecanne](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/jecanne/32/2586_2.png) [@jecanne](https://forum.opensearch.org/u/jecanne)\
**Post date:** [December 22, 2021, 4:21pm UTC](https://forum.opensearch.org/t/permission-issue-setting-up-dashboards/8112/1 "2021-12-22T16:21:05Z")

</div>

Hello,

I’m having some issues getting Dashboards to run. Appears to be a permissions problem; there is my error:

```auto
{"type":"log","@timestamp":"2021-12-22T15:27:43Z","tags":["error","opensearch","data"],"pid":5390,"message":"[security_exception]: no permissions for [cluster:monitor/nodes/info] and User [name=dashboards, backend_roles=[kibana_server], requestedTenant=null]"}

```

My dashboards user (i.e. the value of `opensearch.username`) is “dashboards”. I have added this user to the backend role `kibana_server`. This can all be seen from the log line above.

When making a query to `_opendistro/_security/api/roles/` on my cluster I can see the role `kibana_server` has “cluster\_monitor”

```auto
<truncated>
  "kibana_server" : {
    "reserved" : true,
    "hidden" : false,
    "description" : "Provide the minimum permissions for the Kibana server",
    "cluster_permissions" : [
      "cluster_monitor", <----------- This guy
      "cluster_composite_ops",
      "indices:admin/template*",
      "indices:data/read/scroll*"
    ],
<truncated>

```

When querying the current users (i.e. `_opendistro/_security/api/internalusers`) I can see the backend role is applied, but there are no “opendistro\_security\_roles”. I would love to understand the difference between these–I suspect that is where my problem lies. However, I’m having a hard time finding that answer.

Can anyone advise? Thank you very much.

```auto
{
  "admin" : {
    "hash" : "",
    "reserved" : true,
    "hidden" : false,
    "backend_roles" : [
      "admin"
    ],
    "attributes" : { },
    "description" : "admin user",
    "opendistro_security_roles" : [],
    "static" : false
  },
  "dashboards" : {
    "hash" : "",
    "reserved" : true,
    "hidden" : false,
    "backend_roles" : [
      "kibana_server"
    ],
    "attributes" : { },
    "description" : "dashboards user",
    "opendistro_security_roles" : [],
    "static" : false
  }
}

```

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 22, 2021, 6:19pm UTC](https://forum.opensearch.org/t/permission-issue-setting-up-dashboards/8112/2 "2021-12-22T18:19:21Z")

</div>

@jecanne I think you’re missing these lines in config.ylm. If not configured, `kibanaserver` will be the default value for `server_username`

```auto
config:
  dynamic:
    kibana:
      server_username: "dashboards"
      index: ".kibana"

```

---

<div class="post-metadata">

**Author:** ![jecanne](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/jecanne/32/2586_2.png) [@jecanne](https://forum.opensearch.org/u/jecanne)\
**Post date:** [December 23, 2021, 3:31pm UTC](https://forum.opensearch.org/t/permission-issue-setting-up-dashboards/8112/3 "2021-12-23T15:31:14Z")

</div>

Thanks again @pablo

This did the trick!