# User role issue for the Alerting plugin

**URL:** <https://forum.opensearch.org/t/user-role-issue-for-the-alerting-plugin/10406>\
**Category:** Alerting\
**Tags:** troubleshoot\
**Created:** [July 28, 2022, 8:04am UTC](https://forum.opensearch.org/t/user-role-issue-for-the-alerting-plugin/10406 "2022-07-28T08:04:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tarund](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tarund](https://forum.opensearch.org/u/tarund)\
**Post date:** [July 28, 2022, 8:04am UTC](https://forum.opensearch.org/t/user-role-issue-for-the-alerting-plugin/10406/1 "2022-07-28T08:04:01Z")

</div>

Hi,

I am trying to test the alerting plugin with Elastic ES & Kibana. I have 7.10.2 version of ES & Kibana and have installed the below relevant plugins for alerting -

```auto
https://d3g5vo6xdbdb9a.cloudfront.net/downloads/elasticsearch-plugins/opendistro-job-scheduler/opendistro-job-scheduler-1.13.0.0.zip

https://d3g5vo6xdbdb9a.cloudfront.net/downloads/elasticsearch-plugins/opendistro-alerting/opendistro-alerting-1.13.1.0.zip

https://d3g5vo6xdbdb9a.cloudfront.net/downloads/kibana-plugins/opendistro-alerting/opendistroAlertingKibana-1.13.0.0.zip

```

I get the below error message when trying to create alerts -  
[security\_exception] action [indices:data/read/search] is unauthorized for user [\_system]

I am logged in by the superuser, does it take the logged in user or some other user ? do I need to create a new user ? what roles does it need ?

I want to avoid installing the security plugin, I was not able to start the server with that plugin

---

<div class="post-metadata">

**Author:** ![tarund](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tarund](https://forum.opensearch.org/u/tarund)\
**Post date:** [August 8, 2022, 7:55am UTC](https://forum.opensearch.org/t/user-role-issue-for-the-alerting-plugin/10406/2 "2022-08-08T07:55:51Z")

</div>

Hello Team, hoping to get some directions on the above issue. Please help.