# Hide Management app in Home app (Kibana 7.9.1) **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [September 24, 2020, 5:26pm UTC](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861 "2020-09-24T17:26:16Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![ManuelF](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Post date:** [September 24, 2020, 5:26pm UTC](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861/1 "2020-09-24T17:26:16Z")
Hi, Note: I am using ELK 7.9.1 I am trying to grant users the "minimum access required" to do their job and at the same time I am trying to maximize security all I can. I'm aware that system role `kibana_dashboard_only_user` is deprecated and about to dissapear in Kibana 8, but in the meantime it resolves the need I have. I want to restrict users to have access to only certain apps in Kibana. App `Management`is one of the apps that I need to restrict for most of users, except for admins. Pursuing this goal I have tried to reproduce the `kibana_dashboard_only_user`to get the same results. - I added a new role with no `index` privileges but only `space` privileges to `read` `Dashboard`. Then assigned that sole role to a new user. ![kbn-space-privileges](https://us1.discourse-cdn.com/elastic/original/3X/6/c/6c43f89ae2ec869636e0a18b9585fc9596a81cd8.png) Logged in as the new user and all other apps but `Dashboard` were hidden as expected, but the `Management` app was still available from the main menu. ![kbn-management_app](https://us1.discourse-cdn.com/elastic/original/3X/3/a/3ac8cd11187e69a6aa0eedafdcb9a98c67497928.png) - Then added a new `space` and copied all Kibana saved objects from another `space`. This time I limited the visibility of the features within this `space` to display nothing else but `Dashboard`. I granted permissions for the new user to access only this `space`. ![kbn-space-features-access](https://us1.discourse-cdn.com/elastic/original/3X/6/e/6eaae579fb6d528ba763706aa70e1bd26e80dc1a.png) Logged in as the new user just to realize the issue persist: the `Management` app was still available from the main menu. If this user does not have nor require any special admin privileges, and must have access only to read the dashboards, then it does not make any sense that this user can see (and access) an app for management. Even when all the sub-apps inside `Management` triggers pop-ups permissions errors when attempt to access any of them, it would be more elegant and secure if the user couldn't see that app at all. Same issue was described [here](https://discuss.elastic.co/t/hide-management-app-on-kibana-7-2-x/188680), [here](https://github.com/elastic/kibana/issues/77275), [here](https://github.com/elastic/kibana/issues/35965) and officially discussed [here](https://github.com/elastic/kibana/pull/67791) as well. It appears that the development team is working hard to fix this issue or enhancement request. Few questions: - Is there an estimated date for this functionality to be available? - Meanwhile, is there a workaround? - Wouldn't it be easier to simply show or hide `Management` in the `Home` app, regardless of whether or not the user has sufficient privileges on the node to access `Management`? If the user is only allowed to hide or show `Management` from `Customize feature display`, then Kibana would not depend on the permissions of the node that Elasticsearch controls, since it would not be manipulating the permissions of the node, but only showing or hiding access to an app. Likewise, even if the user could see the app (due to some human error in not hiding `Management`), the Elasticsearch privileges would come into play. This would not be very elegant perhaps, but at least safe. Thank you ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [September 24, 2020, 5:36pm UTC](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861/2 "2020-09-24T17:36:30Z")
I can confirm that it is not possible to disable "Stack Management" in Kibana UI. I also want to hide this entry for selected spaces. The good news is that we have just implemented a solution for this in [#67791](https://github.com/elastic/kibana/pull/67791), which _should_ be available in the 7.10 release if all goes to plan. Please subscribe to the issue below for more updates. Thanks Rashmi ---
**Author:** ![ManuelF](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Post date:** [September 24, 2020, 6:52pm UTC](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861/3 "2020-09-24T18:52:24Z")
Well, to wait patiently and hope that everything goes according to plan. Thank you ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 22, 2020, 6:52pm UTC](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861/4 "2020-10-22T18:52:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.