# Roles.yml is not in Open Distro Security 7 format **URL:** \ **Category:** Open Source Elasticsearch and Kibana\ **Tags:** troubleshoot, configure\ **Created:** [September 14, 2022, 4:15am UTC](https://forum.opensearch.org/t/roles-yml-is-not-in-open-distro-security-7-format/10911 "2022-09-14T04:15:23Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![madura](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@madura](https://forum.opensearch.org/u/madura)\ **Post date:** [September 14, 2022, 4:15am UTC](https://forum.opensearch.org/t/roles-yml-is-not-in-open-distro-security-7-format/10911/1 "2022-09-14T04:15:23Z")
Hi, Elasticsearch version : 7.10.2 number of master nodes : 3 data nodes : 1 I’m getting following error when I try enable security tools in opendistro security in elasticsearch, command : `bash /usr/share/elasticsearch/plugins/opendistro_security/tools/securityadmin.sh -nhnv -nrhn -icl -cacert /etc/elasticsearch/certs/MyRootCA.pem -cert /etc/elasticsearch/certs/admin.pem -key /etc/elasticsearch/certs/admin.key -cd /usr/share/elasticsearch/plugins/opendistro_security/securityconfig ` Error : > ERR: Seems /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/roles.yml is not in Open Distro Security 7 format: com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field “cluster” (class com.amazon.opendistroforelasticsearch.security.securityconf.impl.v7.RoleV7), not marked as ignorable (7 known properties: “index\_permissions”, “reserved”, “hidden”, “description”, “static”, “cluster\_permissions”, “tenant\_permissions”]) > at [Source: (String)“{”\_meta":{“type”:“roles”,“config\_version”:2},“kibana\_read\_only”:{“reserved”:true},“security\_rest\_api\_access”:{“reserved”:true},“alerting\_read\_access”:{“reserved”:true,“cluster\_permissions”:[“cluster:admin/opendistro/alerting/alerts/get”,“cluster:admin/opendistro/alerting/destination/get”,“cluster:admin/opendistro/alerting/monitor/get”,“cluster:admin/opendistro/alerting/monitor/search”]},“alerting\_ack\_alerts”:{“reserved”:true,“cluster\_permissions”:[“cluster:admin/opendistro/alerting/alerts/\*”]},“”[truncated 2851 chars]; line: 1, column: 3181] (through reference chain: com.amazon.opendistroforelasticsearch.security.securityconf.impl.SecurityDynamicConfiguration[“opendistro\_security\_logstash”]-\>com.amazon.opendistroforelasticsearch.security.securityconf.impl.v7.RoleV7[“cluster”]) full output : > Clustername: sls-elk > Clusterstate: GREEN > Number of nodes: 4 > Number of data nodes: 1 > .opendistro\_security index already exists, so we do not need to create one. > Populate config from /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/ > Will update ‘\_doc/config’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/config.yml > SUCC: Configuration for ‘config’ created or updated > ERR: Seems /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/roles.yml is not in Open Distro Security 7 format: com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field “cluster” (class com.amazon.opendistroforelasticsearch.security.securityconf.impl.v7.RoleV7), not marked as ignorable (7 known properties: “index\_permissions”, “reserved”, “hidden”, “description”, “static”, “cluster\_permissions”, “tenant\_permissions”]) > at [Source: (String)“{”\_meta":{“type”:“roles”,“config\_version”:2},“kibana\_read\_only”:{“reserved”:true},“security\_rest\_api\_access”:{“reserved”:true},“alerting\_read\_access”:{“reserved”:true,“cluster\_permissions”:[“cluster:admin/opendistro/alerting/alerts/get”,“cluster:admin/opendistro/alerting/destination/get”,“cluster:admin/opendistro/alerting/monitor/get”,“cluster:admin/opendistro/alerting/monitor/search”]},“alerting\_ack\_alerts”:{“reserved”:true,“cluster\_permissions”:[“cluster:admin/opendistro/alerting/alerts/\*”]},“”[truncated 2851 chars]; line: 1, column: 3181] (through reference chain: com.amazon.opendistroforelasticsearch.security.securityconf.impl.SecurityDynamicConfiguration[“opendistro\_security\_logstash”]-\>com.amazon.opendistroforelasticsearch.security.securityconf.impl.v7.RoleV7[“cluster”]) > Will update ‘\_doc/rolesmapping’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/roles\_mapping.yml > SUCC: Configuration for ‘rolesmapping’ created or updated > Will update ‘\_doc/internalusers’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/internal\_users.yml > SUCC: Configuration for ‘internalusers’ created or updated > Will update ‘\_doc/actiongroups’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/action\_groups.yml > SUCC: Configuration for ‘actiongroups’ created or updated > Will update ‘\_doc/tenants’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/tenants.yml > SUCC: Configuration for ‘tenants’ created or updated > Will update ‘\_doc/nodesdn’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/nodes\_dn.yml > SUCC: Configuration for ‘nodesdn’ created or updated > Will update ‘\_doc/whitelist’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/whitelist.yml > SUCC: Configuration for ‘whitelist’ created or updated > Will update ‘\_doc/audit’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/audit.yml > SUCC: Configuration for ‘audit’ created or updated > ERR: cannot upload configuration, see errors above could anyone guide me to resolve this issue ? Thanks in advance. ---
**Author:** ![vi4life](https://avatars.discourse-cdn.com/v4/letter/v/a88e4f/32.png) [@vi4life](https://forum.opensearch.org/u/vi4life)\ **Post date:** [October 4, 2022, 4:56pm UTC](https://forum.opensearch.org/t/roles-yml-is-not-in-open-distro-security-7-format/10911/2 "2022-10-04T16:56:19Z")
Hi @madura, could you please share your roles.yml File? As the Log tells you the 7 Options are no longer known in the Open Distro Security 7. Maybe the way you have to configure these have changed since your Version.