# Grant no permissions for assemble Visualizations

**URL:** <https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505>\
**Category:** Elasticsearch\
**Created:** [August 8, 2018, 12:04pm UTC](https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505 "2018-08-08T12:04:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![LEK-LD](https://avatars.discourse-cdn.com/v4/letter/l/b4bc9f/32.png) [@LEK-LD](https://discuss.elastic.co/u/LEK-LD)\
**Post date:** [August 8, 2018, 12:04pm UTC](https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505/1 "2018-08-08T12:04:58Z")

</div>

Hello there,

I installed X-Pack for security purposes in my Elastic Stack. I'm now trying to create a role which has read permissions on my data in Elasticsearch to see logs in the Discover and Dashboard section but cannot create, edit or delete any diagrams in the Visualizations section.

How can I achieve this?

Thanks for your help!

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [August 10, 2018, 2:04pm UTC](https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505/2 "2018-08-10T14:04:36Z")

</div>

Your user needs to have 2 sets of privileges;

1. The `kibana_user` role gives the permissions to save objects like a visualization to the .kibana index. [https://www.elastic.co/guide/en/x-pack/current/built-in-roles.html](https://www.elastic.co/guide/en/x-pack/current/built-in-roles.html)

2. A role you create and give to the user needs to give `read` and `view_index_metadata` privileges on the index with your data (like logstash\*).

So your user might have `kibana_user` and `logstash_reader` roles.

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 7, 2018, 2:08pm UTC](https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505/3 "2018-09-07T14:08:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.