# Users getting error saving CSV reports on their tenant

**URL:** <https://forum.opensearch.org/t/users-getting-error-saving-csv-reports-on-their-tenant/15057>\
**Category:** Reporting Plugin\
**Created:** [July 11, 2023, 9:58pm UTC](https://forum.opensearch.org/t/users-getting-error-saving-csv-reports-on-their-tenant/15057 "2023-07-11T21:58:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tru64jurus](https://avatars.discourse-cdn.com/v4/letter/t/85e7bf/32.png) [@tru64jurus](https://forum.opensearch.org/u/tru64jurus)\
**Post date:** [July 11, 2023, 9:58pm UTC](https://forum.opensearch.org/t/users-getting-error-saving-csv-reports-on-their-tenant/15057/1 "2023-07-11T21:58:23Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.8.0 , use latest Firefox/chrome

**Describe the issue** :

I have OS cluster ( 3 nodes) with multiple tenants , users have full admin over their tenant.

Users get error saving CSV on their tenant.

```auto
"Error generating report.Insufficient permissions. Reach out to your OpenSearch Dashboards administrator." 

```

**Configuration** :  
For each tenant , I have two role bindings :

**RoleMapping1:**

**cluster permissions**

indices:admin/create  
indices\_all  
cluster:admin/opensearch/observability/get

**index\_permissions**

indices\_all  
indices:admin/create

tenants: tenant1(RW) , global\_tenant(RW)

**RoleMapping2:**

reports\_full\_access\_tenant1. Permissions copied from standard role “reports\_full\_access” .

tenants: tenant1(RW) , global\_tenant(RW)

**Relevant Logs or Screenshots** :

Corresponding error on open search node

```auto
[2023-07-05T15:59:40,121][WARN][o.o.r.a.PluginBaseAction] [xxxxxxxxxxxxxx] reports:OpenSearchStatusException: message:no permissions for [indices:admin/create] and User [name=CN=xxxxxxx,OU=Person,OU=Users,OU=xxxxxxxxxxxxxx,OU=Cxxxxxxxxxxxx,OU=xxxxxxxxxxxxx OUs,OU=xxxxxxxxxxx,DC=xx,DC=xxxxxx,DC=xxxxx, backend_roles=[xxxxx,yyyyy,zzzzz], requestedTenant=zzzzz]

```

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [July 17, 2023, 11:26am UTC](https://forum.opensearch.org/t/users-getting-error-saving-csv-reports-on-their-tenant/15057/2 "2023-07-17T11:26:46Z")

</div>

@tru64jurus Could you share a snippet of roles\_mapping.yml and roles.yml corresponding to your test user?