# Create Role which user doesn't allow to change value from time picker in the Kibana Toolbar

**URL:** <https://discuss.elastic.co/t/create-role-which-user-doesnt-allow-to-change-value-from-time-picker-in-the-kibana-toolbar/93141>\
**Category:** Kibana\
**Created:** [July 14, 2017, 8:27am UTC](https://discuss.elastic.co/t/create-role-which-user-doesnt-allow-to-change-value-from-time-picker-in-the-kibana-toolbar/93141 "2017-07-14T08:27:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![s\_b92](https://avatars.discourse-cdn.com/v4/letter/s/90ced4/32.png) [@s\_b92](https://discuss.elastic.co/u/s_b92)\
**Post date:** [July 14, 2017, 8:27am UTC](https://discuss.elastic.co/t/create-role-which-user-doesnt-allow-to-change-value-from-time-picker-in-the-kibana-toolbar/93141/1 "2017-07-14T08:27:57Z")

</div>

I adjust a fix value in the time picker in the Kibana Toolbar. I want only see the last results from yesterday. That is not difficult I know. But I want to create a role with permission that the user doesn't allow to change value from time picker in the Kibana Toolbar. It is possible right now?  
Thanks for your answer?

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [July 17, 2017, 9:27pm UTC](https://discuss.elastic.co/t/create-role-which-user-doesnt-allow-to-change-value-from-time-picker-in-the-kibana-toolbar/93141/2 "2017-07-17T21:27:44Z")

</div>

The short answer is "no". There's no feature in Kibana with X-Pack Security to prevent a user from using the time picker.

But if you put your Saved Search and/or Visualization(s) on a dashboard, and save it with the `Store time with dashboard` option;

 ![](https://us1.discourse-cdn.com/elastic/original/3X/5/e/5e345d11c263677357cf79407cb624b7f9d83e62.png)

And then go to Share menu and get the `Embedded iframe`;

 ![](https://us1.discourse-cdn.com/elastic/original/3X/0/7/07075e745a37b63d70f88c73d6422e3ed47577f8.png)

If you share only the page with that embedded dashboard link, there is no timepicker and it can use a relative timespan to show the last 30 minutes or whatever you want.

But it's not really secure. The user viewing that embedded link can easily view page source, see the URL to your Kibana instance, and navigate there and have full functionality (including using the time picker).

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 14, 2017, 9:28pm UTC](https://discuss.elastic.co/t/create-role-which-user-doesnt-allow-to-change-value-from-time-picker-in-the-kibana-toolbar/93141/3 "2017-08-14T21:28:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.