# Enable stack monitoring but make read only on management links

**URL:** <https://discuss.elastic.co/t/enable-stack-monitoring-but-make-read-only-on-management-links/190312>\
**Category:** Kibana\
**Created:** [July 12, 2019, 10:04pm UTC](https://discuss.elastic.co/t/enable-stack-monitoring-but-make-read-only-on-management-links/190312 "2019-07-12T22:04:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![xujohn](https://avatars.discourse-cdn.com/v4/letter/x/c0e974/32.png) [@xujohn](https://discuss.elastic.co/u/xujohn)\
**Post date:** [July 12, 2019, 10:04pm UTC](https://discuss.elastic.co/t/enable-stack-monitoring-but-make-read-only-on-management-links/190312/1 "2019-07-12T22:04:13Z")

</div>

I try to see stack monitoring using the following role in roles.yml

my\_user\_role:  
cluster: ["cluster:monitor/main", "cluster:monitor/xpack/info"]  
indices:  
- names: [".monitoring-\*"]  
privileges: ["read", "read\_cross\_cluster"]  
run\_as: [" \* "]  
applications:  
- application : " \* "  
privileges : [" \* "]  
resources : [" \* "]

However, there are some links in management -\> kibana folder writeable. How can I make the management -\> kibana links readonly?

Thank you,

John

---

<div class="post-metadata">

**Author:** ![xujohn](https://avatars.discourse-cdn.com/v4/letter/x/c0e974/32.png) [@xujohn](https://discuss.elastic.co/u/xujohn)\
**Post date:** [July 15, 2019, 7:52pm UTC](https://discuss.elastic.co/t/enable-stack-monitoring-but-make-read-only-on-management-links/190312/2 "2019-07-15T19:52:18Z")

</div>

I found a solution. This can be closed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 12, 2019, 7:52pm UTC](https://discuss.elastic.co/t/enable-stack-monitoring-but-make-read-only-on-management-links/190312/3 "2019-08-12T19:52:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
