# Create a role with only privileges to create new kibana space

**URL:** <https://discuss.elastic.co/t/create-a-role-with-only-privileges-to-create-new-kibana-space/359078>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [May 8, 2024, 3:02pm UTC](https://discuss.elastic.co/t/create-a-role-with-only-privileges-to-create-new-kibana-space/359078 "2024-05-08T15:02:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pavani\_Reddy](https://avatars.discourse-cdn.com/v4/letter/p/5f9b8f/32.png) [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\
**Post date:** [May 8, 2024, 3:02pm UTC](https://discuss.elastic.co/t/create-a-role-with-only-privileges-to-create-new-kibana-space/359078/1 "2024-05-08T15:02:40Z")

</div>

Hello Team,

I need to a role with min privileges, such that user will be able to create new space on kibana.  
inbuilt roles will have more privileges than our requirement, I cannot use that.

So please help with creating a role with only privilege to create a new space.

Thanks in advance  
Pavani

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 8, 2024, 3:25pm UTC](https://discuss.elastic.co/t/create-a-role-with-only-privileges-to-create-new-kibana-space/359078/2 "2024-05-08T15:25:17Z")

</div>

> [@Pavani\_Reddy](#):
>
> So please help with creating a role with only privilege to create a new space.

I don't think that is possible, to manage spaces you need the `kibana_admin` role, which has access to all features in Kibana.

---

<div class="post-metadata">

**Author:** ![Pavani\_Reddy](https://avatars.discourse-cdn.com/v4/letter/p/5f9b8f/32.png) [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\
**Post date:** [May 9, 2024, 1:11pm UTC](https://discuss.elastic.co/t/create-a-role-with-only-privileges-to-create-new-kibana-space/359078/3 "2024-05-09T13:11:43Z")

</div>

Hello Leandro,  
Hope you are doing well!  
Thank you for your response.

we cannot use inbuilt roles, because it gives access to all features.  
Is there any other possible way to create a granular privilege for space creation?

GET \_security/role/kibana\_admin

```auto
{
    "cluster" : [],
    "indices" : [],
    "applications" : [
      {
        "application" : "kibana-.kibana",
        "privileges" : [
          "all"
        ],
        "resources" : [
          "*"
        ]
      }
    ],
    "run_as" : [],
    "metadata" : {
      "_reserved" : true
    },
    "transient_metadata" : {
      "enabled" : true
    }
  }

```

I couldn't find good document related to available resources options. Do you have any idea?

Thanks in advance  
Pavani

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 9, 2024, 1:54pm UTC](https://discuss.elastic.co/t/create-a-role-with-only-privileges-to-create-new-kibana-space/359078/4 "2024-05-09T13:54:53Z")

</div>

> [@Pavani\_Reddy](#):
>
> Is there any other possible way to create a granular privilege for space creation?

No, there is not, to create spaces you need to have the `kibana_admin` permission or something similar to it.

You can create a custom role, but it would need to have the same permissions as the `kibana_admin`.

This is mentioned [here](https://www.elastic.co/guide/en/kibana/current/xpack-spaces.html#_required_privileges_3).

To be able to create spaces you need to have a role with have permissions to **all** features in Kibana.