# Create user with limited watches

**URL:** <https://discuss.elastic.co/t/create-user-with-limited-watches/96036>\
**Category:** Elasticsearch\
**Created:** [August 7, 2017, 3:29am UTC](https://discuss.elastic.co/t/create-user-with-limited-watches/96036 "2017-08-07T03:29:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![abpabab](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abpabab/32/20905_2.png) [@abpabab](https://discuss.elastic.co/u/abpabab)\
**Post date:** [August 7, 2017, 3:29am UTC](https://discuss.elastic.co/t/create-user-with-limited-watches/96036/1 "2017-08-07T03:29:23Z")

</div>

I'm going to create new user with specific index and watches related to this index. But all watches in .watches and .watch\_history-\*, this user can see and edit all watches. How can I limit this?

Thanks.

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [August 7, 2017, 7:05am UTC](https://discuss.elastic.co/t/create-user-with-limited-watches/96036/2 "2017-08-07T07:05:42Z")

</div>

Currently there is no security on a per watch level. A user can either edit watches (and all watches) or she cannot. There is however a read-only `watcher_user` role, that only allows to read the watches index and the watch history index, compared to the `watcher_admin` role.

Hope this helps!

---

<div class="post-metadata">

**Author:** ![abpabab](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abpabab/32/20905_2.png) [@abpabab](https://discuss.elastic.co/u/abpabab)\
**Post date:** [August 8, 2017, 7:51am UTC](https://discuss.elastic.co/t/create-user-with-limited-watches/96036/3 "2017-08-08T07:51:31Z")

</div>

Oh, thanks for your reply. Do Elastic team have any plan to do this in future release?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 5, 2017, 7:51am UTC](https://discuss.elastic.co/t/create-user-with-limited-watches/96036/4 "2017-09-05T07:51:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.