# How to allow read only user to report from Kibana **URL:** \ **Category:** Kibana\ **Created:** [July 10, 2019, 3:03pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807 "2019-07-10T15:03:46Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![alonsnir](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@alonsnir](https://discuss.elastic.co/u/alonsnir)\ **Post date:** [July 10, 2019, 3:03pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/1 "2019-07-10T15:03:46Z")
Hi, I need some of my dashboard read only users to be able to export data. X-Pack documentation says " To access Kibana and generate reports, you need the `kibana_user` and `reporting_user` roles". The problem is that users with kibana\_dashboard\_only\_user role don't get the Share menu, therefore cannot export report. So how do I have users who cannot change anything in the Dashboard except filtering of course but still able to export data they see? Thanks Update: I have Kibana upgraded to 7.2 and now kibana\_dashboard\_only\_user has Share menu, but there only Embed Code/Permalinks are available ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [July 10, 2019, 6:32pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/2 "2019-07-10T18:32:49Z")
What license level are you running? Reporting to PDF is not available with the Basic license. You can try out a trial license by following the instructions at [https://www.elastic.co/guide/en/kibana/7.2/managing-licenses.html](https://www.elastic.co/guide/en/kibana/7.2/managing-licenses.html) ---
**Author:** ![alonsnir](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@alonsnir](https://discuss.elastic.co/u/alonsnir)\ **Post date:** [July 11, 2019, 1:00pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/3 "2019-07-11T13:00:52Z")
I'm running on [cloud.elastic.co](http://cloud.elastic.co), I have mentioned X-Pack documentation only as I find anything about reporting there. Other users, who are assigned with kibana\_dashboard\_only\_user can report, so this is clearly not license related issue. ---
**Author:** ![alonsnir](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@alonsnir](https://discuss.elastic.co/u/alonsnir)\ **Post date:** [July 15, 2019, 4:28pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/4 "2019-07-15T16:28:47Z")
@Nathan_Reese have you had a chance to look into? I believe what I'm trying to achieve must be very common among others on [cloud.elastic.co](http://cloud.elastic.co) - showing some user/client a desktop with whatever he supposed to see, giving him an option to export what he is seeing, while preventing him to modify desktop. Thanks ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [July 15, 2019, 4:45pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/5 "2019-07-15T16:45:11Z")
How are your users configured? What roles are applied and in what order? ---
**Author:** ![alonsnir](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@alonsnir](https://discuss.elastic.co/u/alonsnir)\ **Post date:** [July 15, 2019, 5:09pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/6 "2019-07-15T17:09:16Z")
Not sure about how users configured. I have created them via kibana Users panel Roles: User who can only share Embed Code/Permalinks production\_transactions\_reader - custom role with only "read" privilege to some index kibana\_user reporting\_user kibana\_dashboard\_only\_user If I create other user with same roles except kibana\_dashboard\_only\_user it allows to share PDF/PNG as well What order: Order is as appear here ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [July 15, 2019, 7:20pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/7 "2019-07-15T19:20:11Z")
Dashboard only mode does not work with reporting. The role works fine, it's just dashboard only mode always hides the menu items to create reports, and the user can't navigate to the reporting page in management. You can accomplish dashboard read only and allow access to reporting with feature controls (that have just been added in 7.2). > **[Kibana 7.2.0 released](https://www.elastic.co/blog/kibana-7-2-0-released#featurecontrol)** > > Kibana 7.2 releases feature control, saved objects import and export API, Rolled up data in Time Series Visual Builder, Canvas enhancement, and more. [https://www.elastic.co/guide/en/kibana/current/kibana-privileges.html#\_feature\_privileges](https://www.elastic.co/guide/en/kibana/current/kibana-privileges.html#_feature_privileges) ---
**Author:** ![alonsnir](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@alonsnir](https://discuss.elastic.co/u/alonsnir)\ **Post date:** [July 17, 2019, 4:08pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/8 "2019-07-17T16:08:47Z")
Still no success here. For user to be able to report it must at least have `kibana_user` and `reporting_user`. I have removed the `kibana_dashboard_only_user` and added it a space privilege with Dashboard `Read`. User still has full access to the dashboard, I would guess as it has `kibana_user` role. ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [July 17, 2019, 8:28pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/9 "2019-07-17T20:28:03Z")
It looks like it is not possible to have a dashboard read only user with reporting capabilities. I have created [https://github.com/elastic/kibana/issues/41407](https://github.com/elastic/kibana/issues/41407) to track. ---
**Author:** ![alonsnir](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@alonsnir](https://discuss.elastic.co/u/alonsnir)\ **Post date:** [August 5, 2019, 1:04pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/10 "2019-08-05T13:04:03Z")
late response, thanks ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 2, 2019, 1:04pm UTC](https://discuss.elastic.co/t/how-to-allow-read-only-user-to-report-from-kibana/189807/11 "2019-09-02T13:04:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.