# How to specify dashboard only access with change password permissions

**URL:** <https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186>\
**Category:** Elasticsearch\
**Created:** [February 2, 2018, 8:36am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186 "2018-02-02T08:36:54Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![liz](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@liz](https://discuss.elastic.co/u/liz)\
**Post date:** [February 2, 2018, 8:36am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/1 "2018-02-02T08:36:54Z")

</div>

I'm currently trying to define roles for the different user types on the system using the Kibana user management interface.  
I'm struggling to determine the right combination of privileges to achieve the access I require which is as follows:

- Dashboard only access (can only view the dashboards tab)
- Change password access on a user basis (only the logged in user can change their own password)

I have defined data access privileges on an index basis so I don't think this is my issue. I have attached screenshots of my role definition and user definition.  
If someone could provide me with the type of permission options I need to specify to achieve this, it would greatly help my situation.  
Thanks in advance!

![Role_Definition](https://us1.discourse-cdn.com/elastic/original/3X/c/f/cfabf2d7d28c5dbbde852cf62648d4675f6a1777.png)  
 ![User_Definition](https://us1.discourse-cdn.com/elastic/original/3X/b/e/be48460a2892b10ebc19e1eaf53c847fb142213a.png)

---

<div class="post-metadata">

**Author:** ![liz](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@liz](https://discuss.elastic.co/u/liz)\
**Post date:** [February 8, 2018, 5:18am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/2 "2018-02-08T05:18:43Z")

</div>

Can someone help me please?

---

<div class="post-metadata">

**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\
**Post date:** [February 9, 2018, 10:45pm UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/3 "2018-02-09T22:45:14Z")

</div>

Hi Liz, sorry for the delay. Every user should be able to change their password on the Account page that you see when you click your name in the side bar. However, I think you've uncovered a bug in which dashboard-only users don't have access to this part of the UI. I'm going to investigate this and see if I can fix this for you and our other users.

If your users are comfortable using cURL, there's a [change password API](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-change-password.html) which every user can use to change her/his password.

Thanks,  
CJ

---

<div class="post-metadata">

**Author:** ![liz](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@liz](https://discuss.elastic.co/u/liz)\
**Post date:** [February 12, 2018, 5:26am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/4 "2018-02-12T05:26:46Z")

</div>

Hi CJ,

Thanks for getting back to me. Ok great, thank you so much!  
I will have a look into the change password API for the meanwhile.

Thanks,  
Liz

---

<div class="post-metadata">

**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\
**Post date:** [February 14, 2018, 6:11pm UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/5 "2018-02-14T18:11:57Z")

</div>

Hi Liz we've just merged the fix for this into X-Pack. It should be available in 6.2.2 and later versions. Thanks again for bringing this up!

CJ

---

<div class="post-metadata">

**Author:** ![liz](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@liz](https://discuss.elastic.co/u/liz)\
**Post date:** [February 16, 2018, 5:53am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/6 "2018-02-16T05:53:54Z")

</div>

Hi CJ,

Thank you for fixing the issue so quickly and getting back to me. No problem!

Liz

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 16, 2018, 5:54am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186/7 "2018-03-16T05:54:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
