# Clone kibana\_user role without Manage/Delete privs

**URL:** <https://discuss.elastic.co/t/clone-kibana-user-role-without-manage-delete-privs/183787>\
**Category:** Kibana\
**Created:** [May 31, 2019, 7:14pm UTC](https://discuss.elastic.co/t/clone-kibana-user-role-without-manage-delete-privs/183787 "2019-05-31T19:14:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![uklipse](https://avatars.discourse-cdn.com/v4/letter/u/cdc98d/32.png) [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Post date:** [May 31, 2019, 7:14pm UTC](https://discuss.elastic.co/t/clone-kibana-user-role-without-manage-delete-privs/183787/1 "2019-05-31T19:14:44Z")

</div>

We have some users that need to view the data in the dashboards and query via discover. We've given them kibana\_user role but they can also make changes to advanced settings and access dev tools on indices they have rights to. The kibana\_dashboard\_only\_user role doesn't give them rights to discover which they need. We are on 6.3.

Anyway we can clone kibana\_user role that doesn't include manage or delete privileges or create a new role that had .kibana\* privileges?

Thanks

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [June 5, 2019, 6:47pm UTC](https://discuss.elastic.co/t/clone-kibana-user-role-without-manage-delete-privs/183787/2 "2019-06-05T18:47:52Z")

</div>

Hello @uklipse -

I'm curious if you've tried creating a new role via the management UI - [https://www.elastic.co/guide/en/elastic-stack-overview/current/defining-roles.html#roles-management-ui](https://www.elastic.co/guide/en/elastic-stack-overview/current/defining-roles.html#roles-management-ui)

It sounds to me like you need a role that specifies dashboard access and provide access to the necessary indices.

Hope this helps, let me know if you have further questions.

---

<div class="post-metadata">

**Author:** ![uklipse](https://avatars.discourse-cdn.com/v4/letter/u/cdc98d/32.png) [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Post date:** [June 10, 2019, 3:31pm UTC](https://discuss.elastic.co/t/clone-kibana-user-role-without-manage-delete-privs/183787/3 "2019-06-10T15:31:24Z")

</div>

Yes, that worked. I never saw the kibana-\* listed under available indicies but if I manually add it then it worked. Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 8, 2019, 3:31pm UTC](https://discuss.elastic.co/t/clone-kibana-user-role-without-manage-delete-privs/183787/4 "2019-07-08T15:31:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.