# APM Permission UI for space user

**URL:** https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680
**Category:** Elastic Observability
**Tags:** elastic-stack-security
**Created:** [May 1, 2022, 6:15pm UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680 "2022-05-01T18:15:39Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![renato473](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/renato473/32/105085_2.png) [@renato473](https://discuss.elastic.co/u/renato473)
#### Post date: [May 1, 2022, 6:15pm UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680/1 "2022-05-01T18:15:39Z")

</div>

Hey,

I would like to know how I do through users / roles that only list the APM service that my developer works instead of showing all the APM services that are being monitored.

example: attached an image that would like to display only the underlined items and the others not be displayed through Kibana's user / roles.

 ![exemplo](https://us1.discourse-cdn.com/elastic/original/3X/4/9/494f4f4b7b7ce8d71197c4211c2083b92c0558d7.png)

I tried what is in the post but I was not successful.

> [@Restrict Kibana users to only see some APM service.environment in APM UI](https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784/2):
>
> Hi @Agzem, how are you doing? I believe you can achieve what you want by creating a new Role for each user and specifying the field Grant read privileges to specific documents, like the image below: As you can see I created a new Role which grants read privileges to apm-\* but only for production environment. You can read more about it in the [document-level-security](https://www.elastic.co/guide/en/elasticsearch/reference/master/document-level-security.html) page.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 1, 2022, 11:44pm UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680/2 "2022-05-01T23:44:27Z")

</div>

Welcome to our community! 😃

You can either create a few [spaces in Kibana](https://www.elastic.co/guide/en/kibana/current/xpack-spaces.html) to logically separate things. Otherwise you'd need field and document level security to really lock down access.

---

<div class="post-metadata">

### Author: ![renato473](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/renato473/32/105085_2.png) [@renato473](https://discuss.elastic.co/u/renato473)
#### Post date: [May 2, 2022, 2:17am UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680/3 "2022-05-02T02:17:22Z")

</div>

Hi,

I've already created the space per user using the problem role and I don't know how to do it via document security. As in the link you leave in the first post, it still displays all the services.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 2, 2022, 3:25am UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680/4 "2022-05-02T03:25:23Z")

</div>

[Role mappings | Kibana Guide [8.1] | Elastic](https://www.elastic.co/guide/en/kibana/current/role-mappings.html) goes into that functionality, but it's not free unfortunately.

---

<div class="post-metadata">

### Author: ![renato473](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/renato473/32/105085_2.png) [@renato473](https://discuss.elastic.co/u/renato473)
#### Post date: [May 2, 2022, 5:24am UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680/5 "2022-05-02T05:24:08Z")

</div>

no problems using the cloud version 15 trial account. Follow the settings of how is my APM.

APM Service Name

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/9/a9293827435261b0067bfaf7bb6ffba96bb34085.png)

ROLE

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/8/0882ec0b6d38c557f4639d0ebcbbb07a612360d1.png)

Mapping

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/9/29d6f7254bb3c031cbc79994da985bc372f0a5bc.png)

and even with mapping I didn't have the expected result

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 4, 2022, 8:35am UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680/6 "2022-11-04T08:35:22Z")

</div>


