How to restrict user to access tab on kibana

Thank you for your elaborate reply and may i know where i have put this change. whether i have to paste it on elasticsearch.yml

User which im creating, they need to look discover for events and they dont need to create/delete/update